Choose the directive to relax the rules for. Common choices are the following:

• img-src controls where to load images from, which can be other domains, or inline (e.g., data: scheme) definitions.
• script-src controls sources for scripts. This may need to be relaxed to allow plugins not compatible with Content Security Policy restrictions to work. Relaxing the rules for this directive may be very unsafe.
• style-src controls sources for stylesheets. Some plugins may require additional domains to render correctly.
• connect-src controls URLs that can be loaded via AJAX, WebSockets, or EventSource. This may need to be relaxed if plugins need to connect to external APIs or services.
• font-src controls sources for web fonts. This may need to be relaxed if plugins use fonts from CDNs or other external sources.
• media-src controls sources for audio and video elements.
• frame-src controls sources for frames and iframes. This may need to be relaxed if plugins embed external content.
• default-src serves as a fallback for other fetch directives. Changing this affects all other directives, unless they've specifically been set to not inherit.