Update manifest.json

removed line 48:
        "content_security_policy": "script-src 'self' https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net; object-src 'self'; default-src 'self';"