update CSP rules
Merge pull request #1897 from clouserw/csp

update CSP rules