JS scripts seem to be inlined by mobile carrier - How to deal with that?

Some pages aren't correctly received on mobile phones (many ones in France) : JavaScript script elements are inlined.

Instead of having

 <script src="static/jquery-2.1.3.min.js"></script>

I have

 <script> ... content of the whole jQuery script ... </script>

This breaks the Content Security Policy.

Is there a way to deal with that other than using HTTPS ? Maybe some way to specify the page shouldn't be rewritten by third parties ?