Strict CSP

The block on a page served with a Content-Security-Policy whose style-src is 'self' alone: inline style attributes in server-rendered markup are blocked, so the calendar renders in the browser, where React sets its styles through the CSSOM.