renamed csp.js to core.js