You can now develop with Blazor in Visual Studio using a strong CSP. You should always develop with HTTPS and you should always use the same CSP in development as in production. This prevents developers adding unsecure scripts and styles before it gets expensive to remove them. This also helps you not deploying unsecure HTTP links or references to CDNs.
Sort: