backstage/.changeset/2603.md

@backstage/backend-common, @backstage/create-app

@backstage/backend-common	@backstage/create-app
minor	minor

Make CSP configurable to fix app-backend served app not being able to fetch

See discussion here on discord