# Do not connect js Content Security Policy directive: "script-src 'self'

**URL:** <https://discuss.dev.twitch.com/t/do-not-connect-js-content-security-policy-directive-script-src-self/13923>\
**Category:** Extensions\
**Created:** [January 24, 2018, 4:55pm UTC](https://discuss.dev.twitch.com/t/do-not-connect-js-content-security-policy-directive-script-src-self/13923 "2018-01-24T16:55:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wed](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/wed/32/6246_2.png) [@Wed](https://discuss.dev.twitch.com/u/Wed)\
**Post date:** [January 24, 2018, 4:55pm UTC](https://discuss.dev.twitch.com/t/do-not-connect-js-content-security-policy-directive-script-src-self/13923/1 "2018-01-24T16:55:59Z")

</div>

Hi, trying to make the application immediately an error occurred during the test

Refused to load the script ‘[http://URL/include/jquery-3.3.1.min.js](http://URL/include/jquery-3.3.1.min.js)’ because it violates the following Content Security Policy directive: “script-src ‘self’ [https://8h6o3c3dbv6lmgkcowx7av6sn1nkxw.ext-twitch.tv](https://8h6o3c3dbv6lmgkcowx7av6sn1nkxw.ext-twitch.tv) [https://extension-files.twitch.tv](https://extension-files.twitch.tv)”.

drop.html:1 Refused to load the script ‘[http://URL/include/twitch.js](http://URL/include/twitch.js)’ because it violates the following Content Security Policy directive: “script-src ‘self’ [https://8h6o3c3dbv6lmgkcowx7av6sn1nkxw.ext-twitch.tv](https://8h6o3c3dbv6lmgkcowx7av6sn1nkxw.ext-twitch.tv) [https://extension-files.twitch.tv](https://extension-files.twitch.tv)”.

Connection

How to fix the error?

Thank you.

---

<div class="post-metadata">

**Author:** ![george](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/george/32/120_2.png) [@george](https://discuss.dev.twitch.com/u/george)\
**Post date:** [January 24, 2018, 5:53pm UTC](https://discuss.dev.twitch.com/t/do-not-connect-js-content-security-policy-directive-script-src-self/13923/2 "2018-01-24T17:53:20Z")

</div>

Unless it was an error in your post make sure your resources are https not http.

---

<div class="post-metadata">

**Author:** ![Wed](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/wed/32/6246_2.png) [@Wed](https://discuss.dev.twitch.com/u/Wed)\
**Post date:** [January 24, 2018, 8:00pm UTC](https://discuss.dev.twitch.com/t/do-not-connect-js-content-security-policy-directive-script-src-self/13923/3 "2018-01-24T20:00:46Z")

</div>

For the application, be sure to https?