The first time I encountered this was when one of our devs was having trouble with CSP violations in development. Turns out the honey chrome extension injecting scripts was the problem!