我有与内容安全策略相关的问题

Question

我有这个问题

我的 CSP 标头是

<meta
  http-equiv="Content-Security-Policy"
  content="style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-eval' 'unsafe-inline' https://cdn.firebase.com https://www.gstatic.com https://connect.facebook.net https://www.googletagmanager.com https://www.unpkg.com; object-src 'self'; img-src 'self'; "
/>