refactor: narrow down connect-src directive

Co-authored-by: john gravois <[email protected]>

Author: angela-tran

benefits/settings.py

@@ -313,7 +313,13 @@ def RUNTIME_ENVIRONMENT():
 CONTENT_SECURITY_POLICY = {
     "DIRECTIVES": {
         "base-uri": [NONE],
-        "connect-src": [SELF, "https://api.amplitude.com/", "https://cdn.jsdelivr.net/"],
+        "connect-src": [
+            SELF,
+            "https://api.amplitude.com/",
+            "https://cdn.jsdelivr.net/npm/@switchio",
+            "https://cdn.jsdelivr.net/npm/bootstrap",
+            "https://cdn.jsdelivr.net/npm/jquery",
+        ],
         "default-src": [SELF],
         "font-src": [SELF, "https://fonts.gstatic.com/"],
         "frame-ancestors": [NONE],