See https://www.w3.org/TR/CSP3/#unsafe-hashes-usage
Sorry for the forward dupe, it appears the engineer missed this. *** This bug has been marked as a duplicate of bug 231313 ***