<?xml version="1.0"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="img-src">
            <values>
                <value id="gumlet_images" type="host">video.gumlet.io</value>
                <value id="alainpharmacy-ae.gumlet.io" type="host">alainpharmacy-ae.gumlet.io</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="gumlet_frames" type="host">play.gumlet.io</value> <!-- Allow Gumlet frames -->
            </values>
        </policy>
        <policy id="connect-src">
            <values>
                <value id="gumlet_api" type="host">api.gumlet.com</value> <!-- Allow Gumlet API -->
                <value id="dpm_demdex" type="host">dpm.demdex.net</value>
                <value id="amcglobal" type="host">amcglobal.sc.omtrdc.net</value>
            </values>
        </policy>
        <policy id="media-src">
            <values>
                <value id="gumlet_audio" type="host">alainpharmacy-ae.gumlet.io</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
