CSP: Fix parsing of 'host/path' source expressions