Tenger Plugin: content security policy