I have added CSP to my webapp like this:
add_header Content-Security-Policy upgrade-insecure-requests; add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";
Almost all the places worked fine except that there is a page that returns
Failed to load resource: the server responded with a status of 406 () chrome-error://chromewebdata/
This error happens when using google chrome but works fine with Firefox.
I am not too sure what is wrong here