Hello,

We are developing a console extension, and realized that we are not able to load any of our js files into our jinja templates in development. The network tab reads that the script request failed, and the console reads:

"violates the following Content Security Policy directive: "script-src 'self' https://cdn1-dev.onlineaccess1.com https://cdn1-stage.onlineaccess1.com https://cdn1.onlineaccess1.com https://sdk-cdn.onlineaccess1.com https://sdk-cdn-stg.onlineaccess1.com https://sdk-stg.onlineaccess1.com https://local-dev-api.q2developer.com 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked."

Our workaround has been to just include our javascript in script tags on the jinja template, although this is not ideal. Is this a known behavior for developing in console?

I also want to mention that this only happens in development mode. The error messages disappeared and the index.js file loaded just fine in PTE.