calling file download api and facing this type of error CORS

aura_prod.js:38 Refused to connect to 'https://api.box.com/2.0/files/1154935598453/content' because it violates the following Content Security Policy directive: "connect-src 'self' https://static.lightning.force.com https://api.bluetail.salesforce.com https://staging.bluetail.salesforce.com https://preprod.bluetail.salesforce.com https://www.googleapis.com https://maps.googleapis.com https://dog.ceo https://content.dropboxapi.com https://signature-server.glitch.me https://eruditeworksprivatelimited4--partial.sandbox.my.salesforce.com https://graph.microsoft.com https://upload.box.com blob: *.vf.force.com https://eruditeworksprivatelimited4--partial.sandbox.file.force.com https://cs76.salesforce.com https://notification-service.sfproxy.null.ukb.aws.sfdc.cl wss://notification-service.sfproxy.null.ukb.aws.sfdc.cl".

value @ aura_prod.js:38
handledownload @ boxFileUploader.js:1
callHook @ aura_prod.js:47
(anonymous) @ aura_prod.js:13
Yr @ aura_prod.js:13
wr @ aura_prod.js:13
(anonymous) @ aura_prod.js:13
t @ aura_prod.js:1
(anonymous) @ aura_prod.js:1
u @ aura_prod.js:1
Vn @ aura_prod.js:1
aura_prod.js:38 Refused to connect to 'https://api.box.com/2.0/files/1154935598453/content' because it violates the document's Content Security Policy.