Most of the modern browsers to stop loading the page, when a XSS is identified. Thats why here I added .StyleSources(s => s.CustomSources("https://fonts.googleapis.com")) and .FontSources(s => s.CustomSources ("https://fonts.gstatic.com")). This makes it easier to diagnose issues with overlapping process restarts in IIS when you may have multiple IIS worker processes running. ,