Hello from the sandbox!
If the Content Security Policy is working, external styles and scripts should NOT load.