Content Security Policy issue

Hello,

We have create pinger plugin and load a ifarme in ping.phtml file but showing error “Refused to frame ‘https://google.com/’ because it violates the following Content Security Policy directive: “default-src ‘self’ https://my-ip-address:9090”. Note that ‘frame-src’ was not explicitly set, so ‘default-src’ is used as a fallback.”

manifest.json: “content-security-policy”: “default-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’”