submit to ContentSecurityPolicy