Added Content-Security-Policy to the default preview HTML template