Added contentSecurityPolicy

to get rid of some errors