main: frame-src 'none' main: connect-src https://viewer.diagrams.net https://app.diagrams.net https://fonts.googleapis.com https://fonts.gstatic.com pr: frame-src blob: pr: connect-src https://viewer.diagrams.net https://app.diagrams.net https://fonts.googleapis.com https://fonts.gstatic.com pr iframe sandbox: allow-scripts allow-forms Connecting to 'http://localhost:5733/api/auth/session' violates the following Content Security Policy directive: "connect-src https://viewer.diagrams.net https://app.diagrams.net https://fonts.googleapis.com https://fonts.gstatic.com". The action has been blocked. Fetch API cannot load http://localhost:5733/api/auth/session. Refused to connect because it violates the document's Content Security Policy.