Because it violates the following content security policy directive default src self July 8, 2019 16 32 64 128