Refused to apply inline style because it violates the
following Content Security Policy directive:
"default-src 'self'".
Either the 'unsafe-inline' keyword, a hash
('sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog='), or a
nonce ('nonce-...') is required to enable inline execution.
Note that hashes do not apply to event handlers, style attributes
and javascript: navigations unless the 'unsafe-hashes' keyword
is present. Note also that 'style-src' was not explicitly set,
so 'default-src' is used as a fallback.
I wan a upload a file excel and display it in window app js