Disabled content security policy