facebook csp workaround