Updated again. I am going to turn on the read only content security policy to see if it will break things.