Make ContentSecurityPolicy parsing less generic (#11)
Remove specific paths from CSP