webpacker breaks style-src CSP

[birthdaycorp]

I just installed Webpacker on Rails 5.2.4 app, and get this CSP violation notice in my browser console:

Content Security Policy: The page’s settings observed the loading of a resource at inline (“style-src”). A CSP report is being sent. injectStylesIntoStyleTag.js:117
Content Security Policy: The page’s settings observed the loading of a resource at inline (“style-src”). A CSP report is being sent. injectStylesIntoStyleTag.js:190

This comes from the style-loader. A similar ticket was made to track issues relating to webpacker and CSP, but this issue relating to inserted styles is not mentioned. Curious if anyone else has come across this? If so - how did you hash it?