fetch/api/policies/csp-blocked.js.headers

Content-Security-Policy: connect-src 'none';