Content Security Policy directive: "script-src 'self' blob: filesystem: chrome-extension-resource:" While fetching whether : <p>I am using jQuery simple whether plugin to get the whether and trying to create a chrome widget.</p>

<p>While loading the file as a chrome extensions, I am getting error, after looking all the help provided by google and here it self, still I am not able to resolve this issue.</p>

<p>Below is the error for yahoo whether </p>

<pre><code>&gt; jquery-2.1.3.min.js:4 Refused to load the script
&gt; 'https://query.yahooapis.com/v1/public/yql?format=json&amp;rnd=2016437&amp;diagnosti…ces(1)%20where%20text=%22New%20Delhi%22)%20and%20u=%22c%22&amp;_=1462326587463'
&gt; because it violates the following Content Security Policy directive:
&gt; "script-src 'self' blob: filesystem: chrome-extension-resource:".
</code></pre>

<p>Another error which is for font,</p>

<pre><code>&gt; Refused to load the font
&gt; 'data:application/octet-stream;base64,AAEAAAAPAIAAAwBwR1NVQrD+s+0AAAD8AAAAQk…GIUViwQIhYsQNkRLEmAYhRWLoIgAABBECIY1RYsQMARFlZWVmzDAIBDCq4Af+FsASNsQIARAAA'
&gt; because it violates the following Content Security Policy directive:
&gt; "default-src *". Note that 'font-src' was not explicitly set, so
&gt; 'default-src' is used as a fallback.
</code></pre>

<p>Used manifest code are </p>

<pre><code>"content_security_policy": "script-src 'self'; object-src 'self' https://query.yahooapis.com/",
    "permissions": [
      "tabs", "&lt;all_urls", "http://localhost/",
      "http://*/*", "https://*/*", "https://query.yahooapis.com/*"
    ],
    "content_scripts":
    [{
        "css": [
            "css/component.css",
            "css/tooltip-line.css",
            "css/modal.css"
        ],
        "js": [
            "js/modernizr.custom.js",
            "js/jquery-2.1.3.min.js",
            "js/jquery.simpleWeather.min.js",
            "js/handlebars-v4.0.5.js",
            "js/moment.min.js",
            "js/background.js"

        ],
        "matches": [ "http://*/*", "https://*/*"]
    }]
</code></pre>

<p>Also In my html file i am using this meta tag </p>

<pre><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'" /&gt;
</code></pre>

<p>Can some one please help me to how i can solve this.</p>
