Refused to connect to ‘WHITELISTED_BACKEND_URL’ because it violates the document’s Content Security Policy.