Problema no cors, mesmo baixndo o projeto final do curso

baixei o projeto final do curso e testei o acesso à API pelo chrome, como ele faz na parte 3 da aula 5, mas o problema continua persistindo.... exibindo essas mensagens:

Access to script at 'https://cdn.speedcurve.com/js/lux.js?id=108906238' from origin 'https://developer.mozilla.org' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
lux.js:1 Failed to load resource: net::ERR_FAILED
fetch("http://localhost:3000/api/fornecedores/1/produtos").then(console.log)
VM186:1 Refused to connect to 'http://localhost:3000/api/fornecedores/1/produtos' because it violates the following Content Security Policy directive: "connect-src 'self' www.google-analytics.com stats.g.doubleclick.net".

(anonymous) @ VM186:1
VM186:1 Refused to connect to 'http://localhost:3000/api/fornecedores/1/produtos' because it violates the document's Content Security Policy.
(anonymous) @ VM186:1
Promise {<rejected>: TypeError: Failed to fetch
    at <anonymous>:1:1}
VM186:1 Uncaught (in promise) TypeError: Failed to fetch
    at <anonymous>:1:1
(anonymous) @ VM186:1
Promise.then (async)
(anonymous) @ VM186:1

alguem tem alguma idéia de qual poderia ser o problema?

obrigado