Parser-inserted scripts without a correct nonce are not allowed with `strict-dynamic` in the script-src directive.