Relaxed CSP to support LESS inline JS evaluation