I believe there were no changes in headers, because they restrict usage by domains that are listed there.

So, to fix this issue @steemchiller has to add HIVE domains to the allowed list:

connect-src 'self' api.hive.blog anyx.io api.hivekings.com