[project] implemented a stricter content security policy