default-src 'self' via meta. The edge cannot see or log this one.
(no header)
Loader tag: unknown (inline script blocked?)