Strict CSP. Expect nonce on both injected tags.
script-src 'nonce-UqZTqTZOUYj3KvUdqDWHMw==' 'strict-dynamic'; object-src 'none'; base-uri 'none'
Loader tag: unknown (inline script blocked?)