Update the Content Security Policy and make it more declarative
Make the demos fully independent
Load the codepen script fully async
Update the grunt dependencies
Update the client-side dependencies