Yes it will. But because we don't load external images for the embed shell or profile shell content we should be good here. Unlike the patch for wmprofile, I only applied CSP to those two routes, not the entire server.