Hello I am trying to inject a script within my application and seeing this error when it tries to load.

Refused to load the script

'https://ts-demo02.ndep.ode.ent.nuance.com/chatskins/launch/inqChatLaunch1000811.js'

because it violates the following Content Security Policy directive:

"script-src *.mathtag.com *.googletagmanager.com *.doubleclick.net *.doubleclick.com *.googlesyndication.com *.googletagservices.com 'unsafe-eval' *.monetate.net *.googleapis.com *.googleadservices.com *.gstatic.com *.bazaarvoice.com *.pinimg.com *.xg4ken.com *.owneriq.net *.salesforceliveagent.com 'unsafe-inline' 'strict-dynamic'  *.wishabi.com *.flippenterprise.net *.flipp.com *.flippback.com  *.expressentry.melissadata.net *.nuance.com *.kampyle.com *.medallia.com 'self' 'nonce-5e98e55e677ee209d6f598e2f745eb5b'".

Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

I see nuance is allowed within the CSP.. but I am still receiving this error. I cannot understand why?