It would be great to have *.businesscentral.dynamics.com in content-security-policy in the response header when requesting files from a site.

Current content-security-policy is frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .powerapps.com .yammer.com .officeapps.live.com .stream.azure-test.net .microsoftstream.com;

Please append *.businesscentral.dynamics.com to that already long list.

Thanks