The favicon service used to show a merchant's icon in the price comparison UI (www.google.com/s2/favicons) redirects to Google's gstatic CDN (t0-t3.gstatic.com), which wasn't allowlisted — CSP silently blocked the redirected image request (reported by some browsers as an opaque response block rather than a clear CSP violation), so the 'Compare prices' cheapest-offer favicon never rendered. Added https://*.gstatic.com to img-src.