fix csp issues for after #1