Extracted JavaScript so X-Content-Security-Policy is possible and no inline javascript is used