csp.js in gh-pages.