It seems like you really screwed up your content security policy settings.
It also tries to retrieve the logos from http://www.example.com/ so that might give away where things are going wrong. That is apparently what your form thinks its hostname is…
