Manual:Hooks/ContentSecurityPolicyScriptSource

Note that you also have to use if you want non-script sources to be loaded from whatever you add.

Details

 * : Array of  directives
 * : Current configuration for the  header
 * :  or   depending on type of header