playing around with content security policy concept