It's common for sites to use usercontent.com domains to sandbox untrusted user content:
dropboxusercontent.com fastmailusercontent.com githubusercontent.com googleusercontent.com
Do you know of any modern alternatives to this, assuming a strict content security policy?