MR diff screen fails on safari

After updating to v13.12 (omnibus) we can no longer access the MR diff 'tab' with safari.

Refused to load https://gitlab/assets/webpack/tree_worker.9e6d2455.worker.js because it does not appear in the child-src directive of the Content Security Policy.
10:35
SecurityError: The operation is insecure. — pointRadial.js:2     vue.esm.is:1897