New version with Content-Security-Policy (CSP) disabled - seems to be buggy