delete Content-Security-Policy meta tag