readded CSP for chrome, as it works correctly