CSP: Refused to Load Script

The console error Refused to load the script means the response’s Content-Security-Policy (or meta tag) does not include the script’s origin in script-src (or a fallback). Styles hit the same check under style-src.

SharePoint tenants may see a surge of these errors after Microsoft CSP enforcement in 2026—use the admin allowlist rather than weakening global browser policy. For static sites, tighten incrementally using CSPFixer-generated policies.