title: Refused to load _framework/aspnetcore-browser-refresh.js after upgrading visual studio to 16.10.0
body: <p>I'm working on <code>.net 5 blazor wasm</code> project. I recently updated my <code>Visual Studio 2019</code> to version <code>16.10.0</code>. All of a sudden I started getting an error message in my browser (Google Chrome) <code>console</code> as shown below:</p>
  <blockquote>
  <p>Refused to load the script
  'https://localhost:44340/_framework/aspnetcore-browser-refresh.js'
  because it violates the following Content Security Policy directive:
  &quot;script-src 'sha256-fa5rxHhZ799izGRP38+h4ud5QXNT0SFaFlh4eqDumBI='&quot;.
  Note that 'script-src-elem' was not explicitly set, so 'script-src' is
  used as a fallback.</p>
  </blockquote>
  <p>I don't have <code>_framework/aspnetcore-browser-refresh.js</code> added in my <code>index.html</code>. Here is the scripts and styles declaration in my <code>index.html</code></p>
  <p><code>styles</code> declared inside <code>&lt;head&gt;</code> in <code>index.html</code>:</p>
  <pre class="lang-html prettyprint-override"><code>&lt;head&gt;
      &lt;meta charset=&quot;utf-8&quot; /&gt;
      &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no&quot; /&gt;
      &lt;title&gt;App&lt;/title&gt;
      &lt;base href=&quot;/&quot; /&gt;
      &lt;link href=&quot;css/site.css&quot; rel=&quot;stylesheet&quot; /&gt;
      &lt;link href=&quot;Web.styles.css&quot; rel=&quot;stylesheet&quot;&gt;
      &lt;link href=&quot;_content/BlazorDateRangePicker/daterangepicker.min.css&quot; rel=&quot;stylesheet&quot; /&gt;
      &lt;link href=&quot;manifest.json&quot; rel=&quot;manifest&quot; /&gt;
      &lt;link rel=&quot;apple-touch-icon&quot; sizes=&quot;512x512&quot; href=&quot;icon-512.png&quot; /&gt;
  &lt;/head&gt;
  </code></pre>
  <p><code>scripts</code> in <code>index.html</code>:</p>
  <pre class="lang-html prettyprint-override"><code>&lt;script src=&quot;_content/Microsoft.AspNetCore.Components.WebAssembly.Authentication/AuthenticationService.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;_framework/blazor.webassembly.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;js/Chart.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;js/print.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;js/pdf.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;_content/BlazorDateRangePicker/clickAndPositionHandler.js&quot;&gt;&lt;/script&gt;
  &lt;script src=&quot;js/blazorInterop.js&quot;&gt;&lt;/script&gt;
  &lt;script&gt;navigator.serviceWorker.register('service-worker.js');&lt;/script&gt;
  </code></pre>
  <p>But when I launch the app via <code>visual studio</code>, from the browser I can see that <code>_framework/aspnetcore-browser-refresh.js</code> gets appended to scripts section in my <code>index.html</code>. Here is the screen print.</p>
  <p><a href="https://i.stack.imgur.com/3B5dD.png" rel="noreferrer"><img src="https://i.stack.imgur.com/3B5dD.png" alt="index.html source" /></a></p>
  <p>This is anything related to my configuration error? or I need to setup CSP in my <code>index.html</code>? Please assist.</p>