Fixes external CSS being blocked on https://beatsaver.com/, where they have a `style-src` directive set to `'self' 'nonce-[value]'` Relates to #5643, but does not make the website load.
