Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-ACotEtBlkqjCUAsddlA/3p2h7Q0iHuDXxk577uNsXwA='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback
this my code base here"
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<title>VOWEL COUNTER</title>
<link rel="stylesheet" href="main.css">
</head>
<body>
<div id="container">
<h1>VOWEL COUNTER</h1>
<input type="text" id="input">
<button id="button">Calculate</button>
<div id="message"></div>
</div>
<script src="counter.js"></script>
</body>
</html>