Content Security Policy (CSP) violation when opening Spotify login URL

[stardvst]

I followed Web API tutorial for Authorization Code Flow, provided the application ID, secret and redirect URI.
I'm getting this CSP violation error in browser console:

Refused to load the script 'data:application/javascript;base64,dmFyIHVyY2hpblRyYWNrZXI9...' because it violates the following Content Security Policy directive: "script-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://accounts.scdn.co". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.