CSP only for text/html