The [CSP level 3](https://www.w3.org/TR/CSP3/) directives seem to be missing: - script-src-elem - script-src-attr - style-src-elem - style-src-attr