How I can see the swagger-html UI ?

[kevinblade]

Hi!
I can't see the swagger-html UI but swagger-json.
What is the problem?
Chrome DevTools console log as follows

Refused to load the script 'https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/3.21.0/swagger-ui-bundle.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

swagger-html:1 Refused to load the script 'https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/3.21.0/swagger-ui-standalone-preset.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

swagger-html:70 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-aprqhcGIuEdFHjJ3tLbisxpYmlmPTnIKzn9fwWb7iGg='), or a nonce ('nonce-...') is required to enable inline execution.

[thomasmost]

are you running locally or in a hosted environment?

[johnny5th]

Here's what I did to allow showing the swagger-html page while in development mode:
Disable CSP when NODE_ENV is in development
server.ts

app.use(helmet({
  contentSecurityPolicy: process.env.NODE_ENV === 'development' ? false : true,
}));