Steps to reproduce the issue

1. Enable the Security Headers plugin with default options

2. Try to create a new field of any of the following types

• checkboxes
• radio
• list
  Which I believe are the only fields with the layout "joomla.form.field.subform.repeatable-table"

Expected result

page refreshes and you can create a field

Actual result

the template doesn't load and checking the source you can see the code in the head is broken

Additional comments

Disable the plugin (which means that no nonce is created etc) and com_fields works as expected

//cc @zero-24