[#36] Finish CSP Fixes (js)

Note:
There is one more bug (incorrect target when clicking lis).