Stripe Connect violating Content Security Policy Directory