- Add https://*.i.posthog.com to both enforcement and reportOnly CSP - Resolves CSP violations blocking PostHog source maps and assets - Fixes blocked requests to recorder.js.map and surveys.js.map This ensures PostHog analytics work properly without CSP violations.