Content Security Policy for ReactJS Hello World

Your code has generated inline JS

The JS in the HTML file between the script tags

All JS needs to be in an external JS file and loaded via <script src this cannot be fixed with CSP change as Twitch Disallows inline Javascript.