Actually… my unsafe-inline just stopped working. Did you introduce some breaking changes? Console reports:
Note that 'unsafe-inline' is ignored if either a hash or nonce value is present in the source list
The thing is that I didn’t change anything. Did the splash screen’s nonce break it? 
I lost a month of web analytics data because of that…