Inline handlers are blocked. Needs a nonce-carrying tag, the allowlisted /static/beacon.js, or dangling markup.