edit csp

remove needless permission