im using helmet.js in an express server. When I try to use paypal buttons for transactions, I get this error:

I've already disabled that part of helmet.js in my code:

app.use(
    helmet({
        contentSecurityPolicy: false,
        crossOriginResourcePolicy: false,
        crossOriginEmbedderPolicy: false,
    }),
);

But, as you can see, a content security policy error still shows up.

How can I fully disable it?