CSP is more of a landmine than we give it credit for. It tripped up Troy Hunt: https://www.troyhunt.com/how-chromes-buggy-content-security-policy-implementatio

CSP is more of a landmine than we give it credit for. It tripped up Troy Hunt: https://www.troyhunt.com/how-chromes-buggy-content-security-policy-implementation-cost-me-money/ https://www.troyhunt.com/how-chromes-buggy-content-security-... I had a very similar experience, and I'm still hunting for the specifics of the browser that caused it in my case.