Neu Content Security Policy directive: "base-uri 'self' https://*.paypal.com"