Update content security policy rules

Allow omdb, media-imdb and firebase sources