Node.js Chrome策略指令（内容安全策略）：拒绝加载脚本'；https://www.paypal.com/sdk/js

我有一个使用Paypal的react应用程序

在index.html中，我有

<script src="https://www.paypal.com/sdk/js?client-id=MYCLIENTID&commit=true&disable-funding=credit,card"></script>

我也用过

https://www.paypal.com/sdk/js

甚至

https://www.paypal.com/sdk/js?client-id=MYCLIENTID&commit=true&disable-funding=credit,card

在页眉上，但仍然在Chrome上出现以下错误

Mysite.com/:1 Refused to load the script 'https://www.paypal.com/sdk/js?client-id=MYCLIENTID&commit=true&disable-funding=credit,card' because it violates the following Content Security Policy directive: "script-src 'self' my policies links...". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

有人知道我怎么能在谷歌浏览器的政策中超过贝宝吗？ 谢谢

Mysite.com/:1 Refused to load the script 'https://www.paypal.com/sdk/js?client-id=MYCLIENTID&commit=true&disable-funding=credit,card' because it violates the following Content Security Policy directive: "script-src 'self' my policies links...". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.