Adding content_security_policy into manifest.json

See issue #368.