title: Content Security Policy... translate.googleapis.com?
body: <p>I just put Content-Security-Policy-Report-Only on one of my sites, and aside from a surprising amount of malware, I'm also seeing reports from translate.googleapis.com, as well as some translation-related image from gstatic.com.</p>
  
  <p>Is there any way to work around this kind of thing? Or do I need to essentially whitelist Google? I'm assuming I'd break their translation plugin if I went live with this Content-Security-Policy.</p>