csp plug: add sts support