<?xml version="1.0"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">

    <policies>
        <!-- Script loading -->
        <policy id="script-src">
            <values>
                <value id="snap-sc-static" type="host">https://sc-static.net</value>
                <value id="snap-tr-snapchat" type="host">https://tr.snapchat.com</value>
            </values>
        </policy>

        <!-- Event tracking + config fetch -->
        <policy id="connect-src">
            <values>
                <value id="snap-tr-snapchat" type="host">https://tr.snapchat.com</value>
                <value id="snap-tr6-snapchat" type="host">https://tr6.snapchat.com</value>
            </values>
        </policy>

        <!-- Tracking pixels -->
        <policy id="img-src">
            <values>
                <value id="snap-tr-snapchat" type="host">https://tr.snapchat.com</value>
                <value id="snap-tr6-snapchat" type="host">https://tr6.snapchat.com</value>
                <value id="snap-sc-static" type="host">https://sc-static.net</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
