added csp.js