fix csp issue w/ close.html