this.stockfish = new Worker(stockfishJsURL);

[KitsuneTheBloodFox]

[Report Only] Refused to create a worker from 'https://www.chess.com/bundles/app/js/engine/stockfish-nnue-15.1.274aa595.js#/bundles/app/js/engine/stockfish-nnue-15.1.5f5319f2.wasm' because it violates the following Content Security Policy directive: "script-src 'none'". Note that 'worker-src' was not explicitly set, so 'script-src' is used as a fallback.
Context
https://www.chess.com/play/computer
Stack Trace
js/chessmint.js:362 (StockfishEngine)

did they, just managed to disable the client?