Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self'

[jmuheim]

This little bookmarklet served me very well for all these years.

It's the first time that I'm having a problem when triggering it:

In plain text:

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' https://static-beta.woz.ch". Either the 'unsafe-inline' keyword, a hash ('sha256-CjNGNj8URgGVcDemg+XsarcETiWp8ag2xSKWHb9iQrk='), or a nonce ('nonce-...') is required to enable inline execution.

iframe.onload @ VM1393:1
(anonymous) @ VM1393:1
(anonymous) @ VM1393:1
VM1393:1 Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-attr 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-sGIZx7apmviM7XhBJiBkgw41NQBTODshucwc4ePW/VE='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

iframe.onload @ VM1393:1
(anonymous) @ VM1393:1
(anonymous) @ VM1393:1
12Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-attr 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-uOhIMM/vKV/KpUM3Q0VKr+HCNkFKMjYEFAmOWM+/c2U='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

31Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-attr 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-HX7KALlcxM42b6D0nzyBnZp966dWKRyFJOduZQauzAQ='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

VM1393:1 Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-attr 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-sGIZx7apmviM7XhBJiBkgw41NQBTODshucwc4ePW/VE='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

It still seems to work on a functional level, but the visuals are ugly:

Any easy way to solve this?