updated contentSecurityPolicy