Content Security Policy: The pages settings blocked the loading of a resource at inline (default-src).