magento-test/app/code/Magento/CardinalCommerce/etc/csp_whitelist.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */
-->
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="script-src">
            <values>
                <value id="cardinal_commerce_geo_stag" type="host">geostag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf_stag" type="host">1eafstag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_geo" type="host">geoapi.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf" type="host">1eafapi.cardinalcommerce.com</value>
                <value id="cardinal_commerce_songbird" type="host">songbird.cardinalcommerce.com</value>
                <value id="cardinal_commerce_test" type="host">includestest.ccdc02.com</value>
            </values>
        </policy>
        <policy id="connect-src">
            <values>
                <value id="cardinal_commerce_geo_stag" type="host">geostag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_geo" type="host">geo.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf_stag" type="host">1eafstag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf" type="host">1eaf.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent_stag" type="host">centinelapistag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent" type="host">centinelapi.cardinalcommerce.com</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="cardinal_commerce_geo_stag" type="host">geostag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_geo" type="host">geo.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf_stag" type="host">1eafstag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf" type="host">1eaf.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent_stag" type="host">centinelapistag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent" type="host">centinelapi.cardinalcommerce.com</value>
            </values>
        </policy>
        <policy id="form-action">
            <values>
                <value id="cardinal_commerce_geo_stag" type="host">geostag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_geo" type="host">geo.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf_stag" type="host">1eafstag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_1eaf" type="host">1eaf.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent_stag" type="host">centinelapistag.cardinalcommerce.com</value>
                <value id="cardinal_commerce_cent" type="host">centinelapi.cardinalcommerce.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>