working around CSP for js loading