extend_content_security_policy:
  type: list
  default: "script_src: http://localhost:4200/"