Fixed a bug caused by Content Security Policy

Due to Content Security Policy, Inline JavaScript will not be executed.

http://developer.chrome.com/extensions/contentSecurityPolicy.html#H2-3