The following CSP directives cannot be used in meta elements and can only be set via headers:
meta
Move these CSP directives to headers.
You can search and find all vulnerabilities