because it violates the following Content Security Policy directive

Solution 1:

First let's break the problem down: You have 7 errors. The first is a style-src violation of your CSP and the rest are your 3 external scripts violation 2 different script-src directives each. Consequently there are 2 or more CSPs at play. You can define them in a meta tag as you have shown, but it could also be defined in a response header. You will need to locate all CSPs and modify them to fix your issues, as content need to pass every single CSP provided.

Your policy allows styles and scripts to load from the origin server and localhost and as inline script and style. You will need to allow the specific host names for your external sources as well, e.g. you'll need to add https://code.jquery.com or just code.jquery.com to script-src to allow loading scripts from that host.