Content Security Policy (CSP) Imports

Summary:

In Oracle 25B upgrade we are having under Important actions and Considerations section the changes required for Content Security Policy (CSP) & Content Security Policy (CSP) Imports, need clarification on this.

Content (please ensure you mask any confidential information):

Could you please help us understand what needs to be stored in the File Manager in Oracle CPQ?

1. External Resources: If users utilize external images, fonts, styles (CSS), and JavaScript (JS), and reference them via external links, should these resources be stored in the File Manager first?
2. JavaScript Usage: When users write JavaScript in library functions, actions, or anywhere within CPQ where JS/BML can be written, is it necessary to store this JavaScript in the File Manager before calling it in BML?