[security] Content Security Policy default block Map Widget

e.g. do a Marker Map

SELECT account_client, trans_city, trans_city_lat, trans_city_lon, trans_amount FROM transactions WHERE trans_amount >= 10000 ORDER BY trans_amount desc limit 20

Refused to load the image 'http://b.tile.osm.org/4/8/5.png' because it violates the following Content Security Policy directive: "img-src 'self' *.google-analytics.com *.doubleclick.net data:".