Merge pull request #26 from magento-tsg/MC-37964

[Condor] MC-37964: [Backport for 2.3.x-p1]Clean CSP violations for EE+B2B

Author: omiroshnichenko

app/code/Magento/PageBuilder/etc/csp_whitelist.xml

@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+-->
+<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
+    <policies>
+        <policy id="connect-src">
+            <values>
+                <value id="vimeo_com" type="host">vimeo.com</value>
+            </values>
+        </policy>
+        <policy id="font-src">
+            <values>
+                <value id="fonts_gstatic_com" type="host">fonts.gstatic.com</value>
+            </values>
+        </policy>
+        <policy id="style-src">
+            <values>
+                <value id="fonts_googleapis_com" type="host">fonts.googleapis.com</value>
+            </values>
+        </policy>
+        <policy id="script-src">
+            <values>
+                <value id="maps_googleapis_com" type="host">maps.googleapis.com</value>
+            </values>
+        </policy>
+        <policy id="img-src">
+            <values>
+                <value id="img_youtube_com" type="host">img.youtube.com</value>
+                <value id="maps_googleapis_com" type="host">maps.googleapis.com</value>
+                <value id="maps_gstatic.com" type="host">maps.gstatic.com</value>
+            </values>
+        </policy>
+        <policy id="frame-src">
+            <values>
+                <value id="www_youtube_com" type="host">www.youtube.com</value>
+            </values>
+        </policy>
+    </policies>
+</csp_whitelist>