You must declare all domains your app depends on
AIE
_meta.ui.csp field
CSP directive(s)
Unlocks
connectDomains
connect-src
fetch, XHR, WebSocket
resourceDomains
script-src style-src font-src img-src media-src
External scripts, styles, fonts, images
frameDomains
frame-src
Nested iframes (maps, video)
baseUriDomains
base-uri
Custom base URIs
Engineering the future of AI