Yes, possibly. If that is the most straightforward way of implementing it, then perhaps we should.  And we aren't dictating a Content Security Policy for the PZH webpage, so there's no compatibility issue.