Hosted Extension runs into Content Security Policy issue

OK after reading some more I realized I was supposed to add the link to the allowlist which fixes everything, don’t know if I should leave the question up, or should I delete it?