addAllowedImageDomain('*'); $csp->addAllowedMediaDomain('*'); $response = new TemplateResponse(Application::APP_ID, 'main'); $response->setContentSecurityPolicy($csp); return $response; } }