fix CSP
Merge pull request #3 from bantic/fix-csp

fix csp issues for after #1