title: Webpack dev server React Content Security Policy error
body: <p>I have my single page app running on webpack-dev-server. I can load and reload my entry route over at <code>localhost:8080</code> and it works every time. However i can load <code>localhost:8080/accounts/login</code> only via a link from within the app i.e whenever i reload <code>localhost:8080/accounts/login</code> from the browser refresh button i get </p>
  
  <pre><code>Cannot GET /accounts/login/
  </code></pre>
  
  <p>as the server response, and on the console i get</p>
  
  <blockquote>
    <p>Content Security Policy: The page’s settings blocked the loading of a
    resource at self (“default-src <a href="http://localhost:8080" rel="noreferrer">http://localhost:8080</a>”). Source:
    ;(function installGlobalHook(window) { ....</p>
  </blockquote>
  
  <p>This is my CSP header on the single page app's index.html</p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy"
    content="default-src * 'self' 'unsafe-inline' 'unsafe-eval'"&gt;
  </code></pre>
  
  <p>I am also not using any <code>devtool</code> on my <code>webpack.config.json</code>. What am i missing.</p>