web: CSP, revert functionality, serve content