update to CSP entry and why it can fail