environment.js

  if (environment !== 'production') {
    ENV['contentSecurityPolicy'] = {
      'default-src': "'none'",
      'frame-src': "'self'",
      'script-src': "'self' *.dev:35730 'unsafe-inline'",
      'font-src': "'self' http://*.dev/",
      'connect-src': "'self' ws://*.dev:35730/",
      'img-src': "'self'",
      'style-src': "'self'",
      'media-src': "'self'"
    }
  }