remove noscripts to it is obvious what --csp does