make sure no rm -fr /
fix csp