Content Security Policy restrictions workaround

fixes #1262