Comment #⁨1⁩

This would be nice to have indeed.

Extensions are allowed to overwrite Content Security Policy (CSP) if I recall correctly. So you should already be able to embed in an extension.