In browsers like Safari that (still) only support CSPv2, when I have \'strict-dynamic\' and \'nonce-AAA\' directives in my Content Security Policy along with all the appropr