title: Swashbuckle Swagger - Refused to execute inline script because it violates the following Content Security Policy directive
body: <p>I've added a CSP header (using custom middleware) to the response of Web API. Unfortunately, it broke a Swagger UI which is generated by Swashbuckle Nuget v5.6.0. The problem is in generated index.html which contains inline js script which violates CSP.</p>
  <p>Is there any way to fix it without changing header values? I would like to stick to the current policy.</p>
  <p>I found some opened/closed issues on GitHub project page but I didn't find any solution yet.</p>