Fixed CSP policy and removed extra backslash.

Fixes #476.