brick still has CSP violations, using modified