Remove unneeded URIs from content security policy header (#23107)

src/metabase/server/middleware/security.clj

@@ -52,8 +52,6 @@
                                    "'unsafe-eval'" ; TODO - we keep working towards removing this entirely
                                    "https://maps.google.com"
                                    "https://accounts.google.com"
-                                   "https://*.googleapis.com"
-                                   "*.gstatic.com"
                                    (when (public-settings/anon-tracking-enabled)
                                      "https://www.google-analytics.com")
                                    ;; for webpack hot reloading