Social Media Contact link blocked by CSP

[Arun Pattni]

After clicking the "I accept the risk" button on the social media contact modal, the CSP is blocking the inline code in the modal to open the new window with the relevant contact page

Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self' https://cdnjs.cloudflare.com". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.