Any hint on this? I can find a way to bypass CSP I tried executing something hosted on the same origin but issues arise.