Remove default-src rules to fix script reports