Content Security Policy Config

you need to set overwriteprotocol to https: