fix(#502): extend CSP to work with monaco-editor

[mmelko]

closes #502

[phantomjinx]

@mmelko if you rebase this then the tests should now pass.

[grgrzybek]

Hmm - does this mean it'll work when monaco will be loaded from CDN?
What about offline/dmz environments with limited access to Internet?
Won't it work when loading from Hawtio origin?

[mmelko]

@grgrzybek hmm valid point. This change comes from PF5 upgrade and it should replace webpack requirements afaik

[grgrzybek]

We need to apply these instructions.

[grgrzybek]

I'm working on a fix to NOT have https://cdn.jsdelivr.net/npm/monaco-editor specified explicitly in CSP headers...

[grgrzybek]

Currently, when viewing Camel source code (which contains <CodeEditor> Patternfly component, we see this:

[grgrzybek]

Looks like it worked with these instructions:

[grgrzybek]

See hawtio/hawtio-next#1186

[grgrzybek]

After hawtio/hawtio-next#1187 is merged and new @hawtio/react version is used in Hawtio online, please remove CDN host from CSP header. I'll do the same for hawtio/hawtio's ContentSecurityPolicyFilter.

cc: @phantomjinx