CSP enforcement on

The Content Security Policy switched from report-only to enforced, with Bandcamp embeds allowed.