docs: fix mgt.dev playground CSP blocking mock data proxy (#3494)

Copilot · web-flow · commit 6274ec33d03f · 2026-07-06T13:49:49.000-07:00
* Initial plan

* Add graph.office.net to CSP connect-src for playground proxy

---------

Co-authored-by: copilot-swe-agent[bot] &lt;198982749+Copilot@users.noreply.github.com&gt;
diff --git a/.storybook/addons/codeEditorAddon/codeAddon.js b/.storybook/addons/codeEditorAddon/codeAddon.js
@@ -254,7 +254,7 @@ export const withCodeEditor = makeDecorator({
                   content="default-src 'self';
                     script-src 'self' 'unsafe-inline';
                     style-src 'self' 'unsafe-inline';
-                    connect-src https://graph.microsoft.com https://graph.microsoft.us https://dod-graph.microsoft.us https://graph.microsoft.de https://microsoftgraph.chinacloudapi.cn https://canary.graph.microsoft.com https://login.microsoftonline.com https://cdn.graph.office.net 'self';
+                    connect-src https://graph.microsoft.com https://graph.microsoft.us https://dod-graph.microsoft.us https://graph.microsoft.de https://microsoftgraph.chinacloudapi.cn https://canary.graph.microsoft.com https://login.microsoftonline.com https://cdn.graph.office.net https://graph.office.net 'self';
                     img-src 'self' data: blob: https://*.microsoft.com https://*.microsoftonline.com https://*.sharepoint.com https://*.office.com https://*.office365.com https://*.windows.net;
                     font-src 'self' https://static2.sharepointonline.com;
                     frame-src https://login.microsoftonline.com 'self';
diff --git a/.storybook/post-process-index-file.js b/.storybook/post-process-index-file.js
@@ -60,7 +60,7 @@ function addCspTag(filePath) {
       ' '
     )} 'self';style-src 'report-sample' 'unsafe-inline' ${styleHashes.join(
       ' '
-    )} 'self';font-src static2.sharepointonline.com 'self';connect-src https://cdn.graph.office.net https://login.microsoftonline.com https://graph.microsoft.com https://mgt.dev 'self';img-src data: https: 'self';frame-src https://login.microsoftonline.com 'self';default-src 'self'; base-uri 'self'; upgrade-insecure-requests; form-action 'self';report-to https://csp.microsoft.com/report/MGT-Playground"
+    )} 'self';font-src static2.sharepointonline.com 'self';connect-src https://cdn.graph.office.net https://graph.office.net https://login.microsoftonline.com https://graph.microsoft.com https://mgt.dev 'self';img-src data: https: 'self';frame-src https://login.microsoftonline.com 'self';default-src 'self'; base-uri 'self'; upgrade-insecure-requests; form-action 'self';report-to https://csp.microsoft.com/report/MGT-Playground"
   />`;
   const updatedHtmlDocument = htmlDocument.replace(
     /<head>/,
