Secure issues with CSS