new disable-csp feature