by Jake Dallimore.
Have you checked the request in your browser's dev tools? Is that Content-Security-Policy header(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) being sent in responses from the tool site?