File: src/Cabin/Bridge/config/content_security_policy.json

{
    "connect-src": {
        "allow": [],
        "self": true,
        "data": false
    },
    "form-action": {
        "allow": [],
        "self": true,
        "data": false
    },
    "frame-ancestors": {
        "allow": [],
        "self": true,
        "data": false
    },
    "font-src": {
        "allow": [],
        "self": true,
        "data": false
    },
    "img-src": {
        "allow": [
            "*"
        ],
        "self": true,
        "data": false
    },
    "media-src": {
        "allow": [],
        "self": true,
        "data": false
    },
    "script-src": {
        "allow": [
            "https:\/\/www.google.com",
            "https:\/\/www.gstatic.com"
        ],
        "unsafe-inline": false,
        "unsafe-eval": false,
        "self": true
    },
    "style-src": {
        "allow": [],
        "unsafe-inline": true,
        "self": true
    },
    "plugin-types": {
        "allow": [
            "application\/javascript"
        ]
    },
    "inherit": true,
    "upgrade-insecure-requests": false
}