createContentSecurityPolicy