title: Violates the following Content Security Policy directive: *** in Shopify
body: <p>I made a custom App for Shopify. But I got the below error when I set up the application AWS EC2.</p>
  <blockquote>
  <p>Refused to frame 'https://***.com:2053/' because it violates the following Content Security Policy directive: &quot;frame-src app.myshopify.io *.shopifyapps.com <em>.myshopify.io <em>.myshopify.com https://</em> shopify-pos://</em>&quot;.</p>
  </blockquote>
  <p>Curiously, when I use Ngrok on the EC2, it works well. On the other hand, when I use the original domain, it doesn't work and I get the error. I have already set up an SSL with Certbot. I confirmed to connect to my domain directly, not via shopify app. I made it referred to this site: <a href="https://shopify.dev/tutorials/build-a-shopify-app-with-node-and-react" rel="nofollow noreferrer">https://shopify.dev/tutorials/build-a-shopify-app-with-node-and-react</a>.</p>
  <p>I have been researching it for a week tho, I have no clue to resolve it. Do you guys have the same experience and do you know how to resolve it?</p>