give all csp rights to main page