fix default src blocking for CSPs
2.0.7
Merge branch 'develop', v2.0.7