Proper helmet settings that allow Apollo Sandbox to work

Hi!

When we enable helmet (with the default configuration, app.use(helmet()), we are no longer able to use Apollo Sandbox. Lots of “refused to load” errors:

Anyone know of some settings that will allow this to work?