Pages

Content security policy

Content Security Policy (CSP) serves as an additional security measure aimed at identifying and mitigating specific attack types, such as Cross-Site Scripting (XSS) and data injection attacks. These malicious activities encompass a wide range of objectives, including data theft, site vandalism, and malware distribution.

default - src

Specifies the default sources for content when a more specific directive is not provided.

font - src

Specifies sources for loading web fonts

img - src

Specifies sources for loading images.

style - src

Specifies sources for loading stylesheets.

Show all

child - src

Specifies sources for creating nested browsing contexts (e.g., iframes).

connect - src

Specifies sources for network requests like AJAX and WebSockets.

frame - src

Specifies sources for embedding frames (iframes).

menifest - src

Specifies the sources for loading web app manifests.

media - src

Specifies sources for loading audio and video.

object - src

Specifies sources for loading plugins and embedded objects.

prefetch - src

Specifies the sources for prefetching resources.

script - src

Specifies sources for loading and executing JavaScript

script - src - elm

Specifies sources for loading scripts with Embedded Language Modules (ELMs)

script - src - attr

Specifies sources for inline script execution.

style - src - elm

Specifies the sources for loading inline styles.

style - src - attr

Specifies the allowed sources for inline style attributes.

worker - src

Specifies the sources for loading web workers.

Show Less