CPS rules

I am in the process of integrating Rive on our website. I can find some sparse documentation regarding CSP rules (https://help.rive.app/runtimes/overview/web-js/faq#i-have-content-security-policy-set-to-block-unsafe-eval-and-now-rive-fails-to-load.-what-do-i-do) but I would need a full CSP rule set listing all the directives and the corresponding values. Can anyone please point me somewhere it has documented?