bookmarklet init Content Security Policy msg added