It is recommended practice to add a content security policy to web views: https://code.visualstudio.com/api/extension-guides/webview#content-security-policy.