removed content security policy