move CSP_FRAME_SRC from base to addons