attempt to fix CSP content blocked issue

Author: sarahs

middleware/csp.js

@@ -38,6 +38,7 @@ module.exports = async (req, res, next) => {
       ],
       frameSrc: [ // exceptions for GraphQL Explorer
         'https://graphql-explorer.githubapp.com', // production env
+        'https://graphql.github.com/',
         'http://localhost:3000', // development env
         'https://www.youtube-nocookie.com'
       ],