CSP interacts in a surprising way (at least it was to me) with service workers.

https://qubyte.codes/blog/content-security-policy-and-servic...