I\'m using NextJS with custom express server. For security I\'m using helmetJS. But Content Security Policy is blocking NextJS endpoints and home page. Express endpoints are