Fix CSP errors on production website

[quietbits]

Follow this guide: https://nextjs.org/docs/pages/building-your-application/configuring/content-security-policy

[quietbits]

I haven't found a fix for some errors we're still getting in production. I'll keep checking for possible solutions.

[leighmcculloch]

Seeing this error at the moment:

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' https://fonts.googleapis.com 'nonce-M2JhZjY3ZDMtNjQ5Zi00NzJmLWI2ZDUtMDdhOWNkY2IwNjg4'". Either the 'unsafe-inline' keyword, a hash ('sha256-0dn9frA6zMLUxFqgdCnR2jU1JeHtRbwSNg3sWvVb9Bs='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.