spike-probe-csp: /open /unsafe-inline /strict /hosted-test