title: MapBox Integration Issue With Heroku
body: <p>I am trying to deploy a mern full stack app with mapbox on heroku where you can add pins with react-map-gl and it does not seem to display the map after login or registration and I get csp errors. I think if I solve those mapbox would show.</p>
  <blockquote>
  <p>The Content-Security-Policy directive name ''unsafe-inline'' contains
  one or more invalid characters. Only ASCII alphanumeric characters or
  dashes '-' are allowed in directive names.</p>
  <p>index.js:89 Refused to create a worker from
  'blob:<a href="https://map-add-pins.herokuapp.com/ca369312-252f-4be1-85be-9bc4b47805a7%27" rel="nofollow noreferrer">https://map-add-pins.herokuapp.com/ca369312-252f-4be1-85be-9bc4b47805a7'</a>
  because it violates the following Content Security Policy directive:
  &quot;script-src 'self'&quot;. Note that 'worker-src' was not explicitly set, so
  'script-src' is used as a fallback.</p>
  </blockquote>
  <p>I tried to add this meta tag in my index.html to offset the csp but that did not solve the issue.</p>
  <pre><code>&lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;'unsafe-inline' blob:;&quot;&gt;
  </code></pre>
  <p>I would like to know what my meta tag should be or if you could offer another solution.</p>
  <p><strong>my heroku link to see issue</strong>: <a href="https://map-add-pins.herokuapp.com" rel="nofollow noreferrer">https://map-add-pins.herokuapp.com</a></p>