title: CSP issues in a project with react router and nodejs
body: <p>I am making a React app where I use React router, and on the backend nodejs + express. My task, when contacting <a href="http://example.ru" rel="nofollow noreferrer">http://example.ru</a>, I give one react application, and when <a href="http://example.ru/admin" rel="nofollow noreferrer">http://example.ru/admin</a> another. The problem is that if I go to <a href="http://example.ru/shop" rel="nofollow noreferrer">http://example.ru/shop</a> via react router (NavLink) my CSP settings work. But if I use the browser address bar, then the CSP settings do not work, or rather they work only on <a href="http://example.ru" rel="nofollow noreferrer">http://example.ru</a>.</p>
  <p>My CSP settings
  <code>&lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;default-src *; img-src http://localhost:3001 https://sun9-23.userapi.com https://steamcdn-a.akamaihd.net https://gspics.org data:&quot;&gt;</code></p>
  <p>Error if you go to <a href="http://example.ru/shop" rel="nofollow noreferrer">http://example.ru/shop</a> through the browser address bar
  <a href="https://i.stack.imgur.com/CMV9b.png" rel="nofollow noreferrer">https://i.stack.imgur.com/CMV9b.png</a></p>
  <p>In browser developer tools, there is a meta tag.
  <a href="https://i.stack.imgur.com/S15C7.png" rel="nofollow noreferrer">https://i.stack.imgur.com/S15C7.png</a></p>