Also no repro in Beta.

Errors from developer tools are hitting in newer builds, but not older builds.

Refused to create a worker from 'blob:https://forest.webvrexperiments.com/bd8d5f9a-12f2-4c48-b992-9fcc095b6211' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' https: http:". Note that 'worker-src' was not explicitly set, so 'script-src' is used as a fallback.

Uncaught DOMException: Failed to construct 'Worker': Access to the script at 'blob:https://forest.webvrexperiments.com/bd8d5f9a-12f2-4c48-b992-9fcc095b6211' is denied by the document's Content Security Policy.

Possibly related to 
https://chromium.googlesource.com/chromium/src/+/d8cc69507968d87cea7eeefc39c0dae78f960879
https://chromium.googlesource.com/chromium/src/+/7c484b27809886d417e55bedad7780d62d148c6d

Assigned to Mkwst to confirm, and determine if this is expected/by design.

That seems accurate. They're not whitelisting `blob:` for scripts, and we've shifted to start treating workers as script for the purposes of CSP. Would it be possible for the site to add `blob:` to `script-src`? Or add `worker-src blob:`?

Giving this back to Megan to either follow up with site owner, or close as "working by design".

Is this site still not working?

Update - On Chrome 64.0.3274.0 I was able to press enter VR and view the WebVR presentation on this site. There doesn't seem to be much you can do inside the presentation except look around, but that worked.