Refused to load the script 'https://xyz.xyz.com/xyz.js' because it violates the following Content Security Policy directive: "

你好,我在替换某网站的某脚本时遇到了以下问题
Refused to load the script 'https://xyz.xyz.com/xyz.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-inline' 'self' 'unsafe-eval' https://xxx.xxx.com". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.