message: fix(runtime-error): modified csp
diff: http-equiv="Content-Security-Policy"
  content="
  default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data:;
  - script-src 'self' 'unsafe-eval';
  + script-src 'self' 'unsafe-eval' 'unsafe-inline';
  connect-src 'self' data:;
  child-src blob:;
  object-src 'none';
  