Content Security Policy

There might be some case you need to add content security policy(CSP) in your website's header. Here are the list of domains firework is using.

Refer: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy

Those site can be added into default-src, of course can be added to other settings(for example connect-src or image-src) as well.

The hosts from firework:

    p2.fwpixel.com 
    fireworkapi1.com 
    fireworkadservices1.com 
    *.fwcdn1.com 
    *.fwcdn2.com 
    *.fwcdn3.com 
    *.fireworktv.com 
    *.fwbiz1.com 
    *.fwpub1.com 
    *.fwadcdn1.com 
    *.fireworkn.com 
    fireworkanalytics.com 
    *.us-west-2.playback.live-video.net 
    *.global-contribute.live-video.net 
    *.us-east-1.playback.live-video.net 
    *.live-video.net 
    *.agora.io 
    *.edge.agora.io 
    *.sd-rtn.com 
    *.edge.sd-rtn.com
    business.firework.com 
    api.firework.com 
    image-resizing-cdn-prod.fireworktv.com 
    ig-importer.firework-prod.com 
    asset.fireworktv.com 
    asset.fwadcdn1.com 
    asset.fwbiz1.com 
    asset.fwcdn1.com 
    asset.fwcdn2.com 
    asset.fwcdn3.com 
    asset.fwpub1.com 
    cdn1.fireworkn.com 
    cdn4.fireworktv.com 
    cdn.fw-assets1.com 
    015d2431f191.global-contribute.live-video.net 
    015d2431f191.us-east-1.playback.live-video.net 
    954b5418d1bd.global-contribute.live-video.net 
    954b5418d1bd.us-west-2.playback.live-video.net;
    https://*.fireworktv.com 
    https://cdn4.fireworktv.com 
    asset.fireworktv.com 
    asset.fwadcdn1.com 
    asset.fwbiz1.com 
    asset.fwcdn1.com 
    asset.fwcdn2.com 
    asset.fwcdn3.com 
    asset.fwpub1.com 
    cdn1.fireworkn.com 
    cdn4.fireworktv.com 
    cdn.fw-assets1.com
    *.execute-api.us-west-2.amazonaws.com
    image-resizing-cdn-prod.fireworktv.com;