<?xml version="1.0"?>
<csp_whitelist>
    <policies>
        <policy id="img-src">
            <values>
                <value id="external-images" type="host">https://cdn.tbibank.support</value>
            </values>
        </policy>
          <policy id="connect-src">
            <values>
                <value id="api-endpoint" type="host">https://ro.tbibank.support</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="tbi-checkout-frame" type="host">https://ro.tbibank.support</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
