It would be great to have *.businesscentral.dynamics.com in content-security-policy in the response header when requesting files from a site.

Current content-security-policy is frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.stream.azure-test.net *.microsoftstream.com;

Please append *.businesscentral.dynamics.com to that already long list.

Thanks