reviewContentSecurityPolicy: Don't add hash sources to additions when they're already allowed
reviewContentSecurityPolicy: Don't add hash sources to additions when they're already allowed

assetgraph/assetgraph