`media-src 'self' blob:;` + `ubConfig.uiSettings.cspAllow.mediaSrc` key

• allow adding additional rules using new key ubConfig.uiSettings.cspAllow.mediaSrc
• added default CSP rule media-src 'self' blob:;