<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright © 2021 CyberSource. All rights reserved.
  ~ See accompanying LICENSE.txt for applicable terms of use and license.
  -->
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="script-src">
            <values>
                <value id="vco_sandbox" type="host">sandbox.secure.checkout.visa.com</value>
                <value id="vco_production" type="host">secure.checkout.visa.com</value>
                <value id="vco_sandbox_assets" type="host">sandbox-assets.secure.checkout.visa.com</value>
                <value id="vco_assets" type="host">assets.secure.checkout.visa.com</value>
                <value id="vco_thm" type="host">thm.visa.com</value>
                <value id="vco_mp" type="host">sandbox.src.mastercard.com</value>
                <value id="vco_mp_sandbox" type="host">sandbox.src.mastercard.com</value>
            </values>
        </policy>
        <policy id="frame-src">
            <values>
                <value id="vco_sandbox" type="host">sandbox.secure.checkout.visa.com</value>
                <value id="vco_production" type="host">secure.checkout.visa.com</value>
                <value id="vco_thm" type="host">thm.visa.com</value>
                <value id="vco_mp" type="host">sandbox.src.mastercard.com</value>
                <value id="vco_mp_sandbox" type="host">sandbox.src.mastercard.com</value>
            </values>
        </policy>
        <policy id="img-src">
            <values>
                <value id="vco_sandbox" type="host">sandbox.secure.checkout.visa.com</value>
                <value id="vco_production" type="host">secure.checkout.visa.com</value>
                <value id="vco_sandbox_assets" type="host">sandbox-assets.secure.checkout.visa.com</value>
                <value id="vco_assets" type="host">assets.secure.checkout.visa.com</value>
                <value id="vco_thm" type="host">thm.visa.com</value>
            </values>
        </policy>
        <policy id="connect-src">
            <values>
                <value id="vco_thm" type="host">thm.visa.com</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>
