Try this @AdrianoLuiz
<meta http-equiv="X-Content-Security-Policy" Access-Control-Allow-Origin: https://EXAMPLE.COM; Origin: https://EXAMPLE.COM">
May have to play around with variations:
Try this @AdrianoLuiz
<meta http-equiv="X-Content-Security-Policy" Access-Control-Allow-Origin: https://EXAMPLE.COM; Origin: https://EXAMPLE.COM">
May have to play around with variations: