I recently enforced a content security policy on my web-app. I used CSP3 with the 'strict-dynamic' source expression. I've been analysing reports and bulk of violations are attributed to "source-file": "about" and "blocked-uri":"inline". The field "document-uri" has URLs from my app.

I wanted to check if this "source-file":"about" is something that others in the web-security world understand. I am inclined to believe that this is noise but I want to be sure.