CSP: Removing Worker/SharedWorker from 'script-src'.