title: Whitelist multiple domains in content security policy
body: <p>I am writting a chrome extension that needs to have two domains in its whitelist for the content security policy. I've looked at the official docs, but I still can't seem to figure out the proper syntax.</p>
  
  <p>The following does not seem to work:  </p>
  
  <pre><code>"content_security_policy": "script-src 'self' https://foo.com https://example.com; object-src 'self'"
  </code></pre>
  
  <p><strong>EDIT:</strong></p>
  
  <p>Both my content script and my popup are able to reach foo.com, however, neither can reach example.com.</p>
  
  <p>Are chrome extensions capable of having multiple sources whitelisted in the CSP?</p>