Separate javascript and css from the directory.html to be compliant with content security policy