---
'@backstage/backend-common': minor
'@backstage/create-app': minor
---

Make CSP configurable to fix app-backend served app not being able to fetch

See discussion [here on discord](https://discordapp.com/channels/687207715902193673/687235481154617364/758721460163575850)