Refactor Content-Security-Policy