Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
