Do not connect js Content Security Policy directive: "script-src 'self'

[Wed]

For the application, be sure to https?