quickfix for breaking change in chrome 39

chrome 39 doesn't allow https:// wildcard content security policy
anymore
quickfix for CSp changes in chrome 39