Function getChatEmbedCSPPolicy

apps/sim/lib/core/security/csp.ts:242–252

()

 * when loaded with `?embed=office`.
 */
export function getChatEmbedCSPPolicy(): string {
  return buildCSPString({
    ...buildTimeCSPDirectives,
    'script-src': [...STATIC_SCRIPT_SRC, 'https://appsforoffice.microsoft.com'],
    'connect-src': [
      ...(buildTimeCSPDirectives['connect-src'] ?? []),
      'https://appsforoffice.microsoft.com',
    ],
    'frame-ancestors': ['*'],
  })
}

/**
 * Add a source to a specific directive (modifies build-time directives)