Disable CSP check by default.

Signed-off-by: Bao Zhen <bz@infthink.com>