Looking at the CSP error, it looks like there's a blob being blocked, not some XSS from Google's domains. My guess at the cause would be an CSP implementation

Looking at the CSP error, it looks like there's a blob being blocked, not some XSS from Google's domains. My guess at the cause would be an CSP implementation difference.