Add ability to exclude URLs from Content Security Policy