Set policy inside index.html instead of independent file