If you use Content Security Policy (CSP) to prevent or minimize the risk of certain types of security threats (such as cross-site scripting (XSS) and clickjacking), then you need to add the following domains into your list of allowed content sources: