Getting a 'worker-src' warning

I installed your module and whitelistet every trusted source. But in the end I still get one CSP error in the browser console for  `https://www.google.com/recaptcha/api2/webworker.js?... ("worker-src")`

There is no section for worker-src In the backend or in the csp_whitelist.xml. Can I just add that in my own module's xml?