title: How to change Content Security Policy directive to allow for addThis widget?
body: <p>I am making a site that uses webpack.<br>
  I am about to launch it and I want to put on <code>addThis</code> share widget. I am adding the <code>addThis</code> code in the <code>index.html</code> right before closing body tag as advised by <code>addThis</code>. Like this:</p>
  
  <pre><code>  &lt;!-- Go to www.addthis.com/dashboard to customize your tools --&gt;
    &lt;script type="text/javascript" 
    src="//s7.addthis.com/js/300/addthis_widget.js#pubid=ra- 
    ###MY_NUMBERS###"&gt;&lt;/script&gt;
  &lt;/body&gt;
  </code></pre>
  
  <p>this generates the following error in chrome-inspect console:</p>
  
  <blockquote>
    <p>Refused to load the script<br>
    '<a href="http://s7.addthis.com/js/300/addthis_widget.js" rel="nofollow noreferrer">http://s7.addthis.com/js/300/addthis_widget.js</a>' because it violates<br>
    the following Content Security Policy directive: "script-src 'self'".</p>
  </blockquote>
  
  <p>I have read up a little on it and it does not seem to work to seperate <code>addThis</code> to another js-file and save that locally to load it to DOM.</p>
  
  <p>I tried add this to my <code>manifest.json</code>:</p>
  
  <pre><code>"content_security_policy": "script-src 'self' http://s7.addthis.com/js/300/addthis_widget.js; object-src 'self'"
  </code></pre>
  
  <p>No success. Is there a way to override CSP settings to allow for <code>addThis-widget</code>?</p>