updated content security policy, fixed typeof error in main.js
updated security policy