this source should be added to script-src as well: https://cdn.optimizely.com 
There is a script is loaded from: https://cdn.optimizely.com/js/206878104.js