nested csp sandbox define method