title: Content Security Policy directive: "script-src 'self' blob: filesystem: chrome-extension-resource:" While fetching whether
body: <p>I am using jQuery simple whether plugin to get the whether and trying to create a chrome widget.</p>
  
  <p>While loading the file as a chrome extensions, I am getting error, after looking all the help provided by google and here it self, still I am not able to resolve this issue.</p>
  
  <p>Below is the error for yahoo whether </p>
  
  <pre><code>&gt; jquery-2.1.3.min.js:4 Refused to load the script
  &gt; 'https://query.yahooapis.com/v1/public/yql?format=json&amp;rnd=2016437&amp;diagnosti…ces(1)%20where%20text=%22New%20Delhi%22)%20and%20u=%22c%22&amp;_=1462326587463'
  &gt; because it violates the following Content Security Policy directive:
  &gt; "script-src 'self' blob: filesystem: chrome-extension-resource:".
  </code></pre>
  
  <p>Another error which is for font,</p>
  
  <pre><code>&gt; Refused to load the font
  &gt; 'data:application/octet-stream;base64,AAEAAAAPAIAAAwBwR1NVQrD+s+0AAAD8AAAAQk…GIUViwQIhYsQNkRLEmAYhRWLoIgAABBECIY1RYsQMARFlZWVmzDAIBDCq4Af+FsASNsQIARAAA'
  &gt; because it violates the following Content Security Policy directive:
  &gt; "default-src *". Note that 'font-src' was not explicitly set, so
  &gt; 'default-src' is used as a fallback.
  </code></pre>
  
  <p>Used manifest code are </p>
  
  <pre><code>"content_security_policy": "script-src 'self'; object-src 'self' https://query.yahooapis.com/",
      "permissions": [
        "tabs", "&lt;all_urls", "http://localhost/",
        "http://*/*", "https://*/*", "https://query.yahooapis.com/*"
      ],
      "content_scripts":
      [{
          "css": [
              "css/component.css",
              "css/tooltip-line.css",
              "css/modal.css"
          ],
          "js": [
              "js/modernizr.custom.js",
              "js/jquery-2.1.3.min.js",
              "js/jquery.simpleWeather.min.js",
              "js/handlebars-v4.0.5.js",
              "js/moment.min.js",
              "js/background.js"
  
          ],
          "matches": [ "http://*/*", "https://*/*"]
      }]
  </code></pre>
  
  <p>Also In my html file i am using this meta tag </p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'" /&gt;
  </code></pre>
  
  <p>Can some one please help me to how i can solve this.</p>