yet another csp fix
Since this isn't covered in the tests, I'll merge it directly :)
rebased onto f9edc26f814a4dc98839a762746d9617f8554c73
Thanks! :)
Pull-Request has been merged by pingou
yet another csp fix