Wordpress Content Security Policy