Demonstrations and Content Security Policy bypass