Auto-configure app CSP for configured Live Preview URL

Describe the Bug

Hi there, thanks a lot for the great work on Directus! 💜

I wanted to try out the new live preview feature but somehow couldn't get it to work with any website I tried to embed. The iframe stayed blank, and in the Javascript console I got an error that says: Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).

Is there some setting that needs to be adjusted on the preview website that I'm missing? First I was testing it with our own website, and then proceeded to test it with things like YouTube embeds. All showed the same behavior :/

To Reproduce

Set any website as the preview URL for a collection, and then view an item from that collection with live preview turned on.

Directus Version

v10.2.1

Hosting Strategy

Self-Hosted (Docker Image)