CSP: Why is document.createElement("script") good and document.write("