ignore content-security-policy header and some automatic import optimization