I also feel like whitelistDomain on CSP needs to check the value I am trying to whitelist and possibly throw an Exception if it isn’t a valid thing.
But I would have to recheck the CSP standard to see what is and isn’t allowed in there
This issue would cause a backwards compatibility break due to the introduced exception.