Added Content Security Policy exceptions to ENV.