rewirte csp.js, core part is 20+ loc JS now. lol.