Config.js. If you're using a different Javascript framework you will likely need to seki the same headers using whatever configuration regime your framework uses. Also, when in a dev environment I am using the unsafe-eval header. I've been looking around thinking there would be some sort of official library or https://urlscan.io/result/01981fa2-0f75-7511-a8d8-2169099c5cd2/