Fix CSP dynamic sources
#34286

pixeltrix wants to merge rails:fix-csp-dynamic-sources into rails:master

We do not currently have an analysis of these two commits