I have .net 7 blazor wasm application (client + server) I constantly see errors in my web browser like this : 
Because of these issues, I probably can't debug my client side application from Visual Studio.I'm trying to disable CSP or at least relax the restrictions a little if debug mode. But I can't!
I've added this in my index.html to allow everything :
<meta http-equiv="Content-Security-Policy" content="default-src * 'unsafe-inline''unsafe-eval'; script-src * 'unsafe-inline''unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; connect-src *;">And this in server side (program.cs) to ensure that my client settings are not overriding.
var builder = WebApplication.CreateBuilder(args);var connectionString = builder.Configuration.GetConnectionString("ApplicationDbContextConnectionPRD") ?? throw new InvalidOperationException("Connection string 'ApplicationDbContextConnection' not found.");#if DEBUGconnectionString = builder.Configuration.GetConnectionString("ApplicationDbContextConnectionDEV") ?? throw new InvalidOperationException("Connection string 'ApplicationDbContextConnection' not found.");#endifbuilder.Services.AddDbContext<ApplicationDbContext>(options => options.UseSqlServer(connectionString));builder.Services.AddDefaultIdentity<ApplicationUser>(options => options.SignIn.RequireConfirmedAccount = true) .AddRoles<IdentityRole>() .AddEntityFrameworkStores<ApplicationDbContext>();builder.Services.AddIdentityServer() .AddApiAuthorization<ApplicationUser, ApplicationDbContext>();builder.Services.AddAuthentication() .AddIdentityServerJwt();builder.Services.AddControllersWithViews();builder.Services.AddRazorPages();builder.Services.AddSingleton<ServerHub>();builder.Services.AddSignalR();builder.Services.AddCors(options =>{ options.AddPolicy(name: "cors", policy => { policy.AllowAnyOrigin(); policy.AllowAnyMethod(); policy.AllowAnyHeader().WithExposedHeaders("*"); });});builder.Services.AddHttpClient();var app = builder.Build();// Configure the HTTP request pipeline.if (app.Environment.IsDevelopment()){ app.UseWebAssemblyDebugging();}else{ // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts();}app.UseHttpsRedirection();app.UseBlazorFrameworkFiles();app.UseStaticFiles();app.UseRouting();app.UseIdentityServer();app.UseAuthentication();app.UseAuthorization();app.MapRazorPages();app.MapControllers();app.MapHub<BlazorWasmApp.Server.Hubs.ServerHub>(BlazorWasmApp.Server.Hubs.ServerHub.HubUrl);app.MapFallbackToFile("index.html");app.Use(async (context, next) =>{ context.Response.Headers.Remove("Content-Security-Policy"); await next.Invoke();});app.Run();But i still have same error.