I'm currently on news.ycombinator.com.

I'd like to run the following code in my devtools:

const response = await fetch("http://localhost:3000/api/upload", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
       html: document.documentElement.outerHTML,
  })
});
await response.json();

However, I get the error:

Refused to connect to 'http://localhost:3000/api/upload' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

Is there a way to work around this in the dev tools, or am I forbidden from making requests to any external API from the devtools?