We researched further on this.
Regarding this CSP, it looks like we need to add this on app.yml under env section:
DISCOURSE_CSP_DIRECTIVES: "default-src 'self' https://pagead2.googlesyndication.com"
We added this, rebuilt the app, restarted the app and still not working.
Any other ideas?