title: CSP style-src failing to recognize SHA?
body: <p>Here is the direct error message I am getting from the Chrome dev tools:</p>
  
  <blockquote>
    <p>Refused to apply inline style because it violates the following Content Security Policy directive: "style-src
    'sha256-1nVQdHiAzq+yQt4PZ8OE7a29XlxBFIzESqqj+rz4Jdc=' 'self'". Either
    the 'unsafe-inline' keyword, a hash
    ('sha256-1nVQdHiAzq+yQt4PZ8OE7a29XlxBFIzESqqj+rz4Jdc='), or a nonce
    ('nonce-...') is required to enable inline execution.</p>
  </blockquote>
  
  <p>Now it seems to me that it is saying that the policy with the hash doesn't contain the needed hash. Am I missing something in my syntax? I get the CSP error from Firefox as well (though with fewer details).</p>
  
  <p>Here's the header directly:</p>
  
  <pre><code>Content-Security-Policy:default-src 'self'; style-src 'sha256-1nVQdHiAzq+yQt4PZ8OE7a29XlxBFIzESqqj+rz4Jdc=' 'self';
  </code></pre>