Как правильно подключить скрипт js(es6), чтобы Security Policy не ругался?

Refused to connect because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

В чем ошибся?Как правильно подключить

Вот мой файл

package.json

    {
  "name": "asdas",
  "version": "1.0.0",
  "description": "",
  "main": "index.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "keywords": [],
  "author": "",
  "license": "ISC",
  "dependencies": {
    "express": "^4.16.3"
  }
}

index.js

const app = require('./app')
const port = process.env.PORT || 5000
app.listen(port, () => console.log(`Server has been started on ${port}`))

app.js

const express = require('express')
const app = express()
module.exports = app