Improving Plugin Security

I see what you mean, I didn't think through the implications of the global CSP. Anyway thanks for the feedback!