Try adding https://cdn.userway.org to the
https://cdn.userway.org
content_security_policy_script_src
site setting and see if that resolves your issue.
Like so