<?xml version="1.0"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp/etc/csp_whitelist.xsd">
    <policies>
        <policy id="script-src">
            <values>
                <value id="google_recaptcha" type="host">www.google.com/recaptcha/</value>
                <value id="gstatic_recaptcha" type="host">www.gstatic.com/recaptcha/</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="www_google" type="host">www.google.com</value>
            </values>
        </policy>
        <policy id="frame-ancestors">
            <values>
                <value id="www_gstatic-frame" type="host">www.gstatic.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
