Even adding `"*.bango.org"` to `CSP_SCRIPT_SRC` setting and using `jsonp` returns an error. Is there something else to try?