CSP Whitelist Support

[PivitParkour94]

When running Magento 2.3.6 with the Magento_CSP module enabled the external resources break because there is no csp_whitelist.xml defined.

Is this something you are planning on adding support for?

Should be as simple as

<?xml version="1.0" encoding="UTF-8"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="img-src">
            <values>
                <value id="mailchiimp_logo" type="host">ebizmarts-website.s3.amazonaws.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>

Docs: https://devdocs.magento.com/guides/v2.4/extension-dev-guide/security/content-security-policies.html

I haven't extensively gone through the module and found all external resources, the above is an example csp to get the ball rolling.