I will give it credit for working on firefox with javascript turned off.
Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).
Loading failed for the <script> with source “https://you.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js”.