Make CSP configurable

After clicking:

How it should look:

EDIT: Fixed by adding frame-src https://*youtube.com and img-src https://*ytimg.com to CSP