title: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'".?
body: <p>I'm trying to use an inline script in my project, and I keep getting this error:
  'Refused to execute inline script because it violates the following Content Security Policy directive: &quot;script-src 'self'&quot;. Either the 'unsafe-inline' keyword, a hash ('sha256-hyQXPyDjuL7UGCz8hPIbJ2ZzKwE8uqNzvUJB9/9T6jc='), or a nonce ('nonce-...') is required to enable inline execution.'</p>
  <p>I've viewed a bunch of other similar questions on here and they all say it has to do with a meta tag and to include something like this:
  <code>&lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'&quot; /&gt;</code></p>
  <p>but that doesn't make a difference, I've removed all the meta tags from my <code>&lt;head&gt; </code> and I still get the same error. where could this issue possibly be coming from other than the
  <code>&lt;head&gt; </code>? ive created my project with the express-generator but i cant find anything CSP in any of my files.</p>
  <p>I'm completely lost on what's blocking the inline scripts, if I can provide any code please let me know but seeing as I have no idea what's causing it, i dont know what code to provide</p>