To eliminate any issues that may be caused by inclusions/markup on your page, I've switched debugging to the default page
https://mymishawakaweather.com/radios.phpUnfortunately, that page shows the same issues with JavaScript warning messages
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/29da0e39-7feb-4891-bec8-2c20d489a1ea (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/418a7c04-834e-4ea2-a92c-912ecc4a7a01 (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/723d7eab-9bcb-4b09-b75f-d4eeed5e9ff3 (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/be76ad25-3062-4781-87f7-173d45c07375 (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/de8aa96c-dfcf-44e3-b63c-54874248e11a (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/7f96150c-d82b-4312-a1ad-09ac3802cc7e (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/1ca38fa8-b546-4c63-8649-5db70cd0fb9a (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/b8ab03bc-82ba-4d5d-b5da-c1686fec0fd5 (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/f86f6f0e-df02-44a2-b4a5-ed62bd4aede4 (“worker-src”). A CSP report is being sent. radios.php
Content-Security-Policy: The report URI (about:blank) should be an HTTP or HTTPS URI. radios.php
Content-Security-Policy: The page’s settings observed the loading of a resource at blob:https://mymishawakaweather.com/044e308d-023a-4664-8500-a456a27cfa10 (“worker-src”). A CSP report is being sent. radios.php
It does succeed in loading the shape files for my KEC49 (Monterey), but not displaying them. Your shapefiles for KXI41 (Crystal Lake) still return 404s, likely reflected from the weather.gov site based on the IP address of your webserver (maybe marked as somewhat naughty?)
Do you have any customization to .htaccess beyond the usual file/ip blocks?