Modifying Content Security Policy