Content Security Policy settings to use web3auth

[lida-spaceport]

What permissions are required by web3auth to run if you are using CSP to secure your site?

Steps to reproduce the behavior:

1. Integrate web3auth
2. Enable CSP on your web server for example using helmet.contentSecurityPolicy
3. web3auth will fail to run

Would be great to have all CSP settings listed in a block so we can just copy paste:
{
scriptSrc: ["web3auth scripts"],
frameSrc: ["if script use frames"],
styleSrc:
imgSrc:
mediaSrc:
}