Content Security Policy causes JS to not load

[retep998]

The Application Cache API (AppCache) is deprecated and will be removed at a future date.  Please consider using ServiceWorker for offline support.
candybox2.github.io
Loading failed for the <script> with source “https://candybox2.github.io/libs/jquery-1.9.1.min.js”.
candybox2.github.io:10
Loading failed for the <script> with source “https://candybox2.github.io/candybox2.js”.
candybox2.github.io:11
Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src 'none'”). Source: (function(a,w,v,I){var c={safeWindow:{},....
candybox2.github.io:1
Content Security Policy: The page’s settings blocked the loading of a resource at https://candybox2.github.io/libs/jquery-1.9.1.min.js (“script-src 'none'”).
Content Security Policy: The page’s settings blocked the loading of a resource at https://candybox2.github.io/candybox2.js (“script-src 'none'”).

Using Firefox 58.0.2

[cktang88]

I only get this when I try to load the page inside an <iframe>, but it works fine for me on Firefox.