#3 fixes csp connect-src issue