Refused to create a worker from 'blob:https://servier.com/a60b0a25-3ac1-41ed-99f4-5d9968c8d8e3' because it violates the following Content Security Policy directive: "default-src https: data: 'unsafe-inline' 'unsafe-eval'". Note that 'worker-src' was not explicitly set, so 'default-src' is used as a fallback.