remove content security package for dummy app
bugfix: add missing f7 source map