Content Security Policy (CSP)

api.Document.securitypolicyviolation_event ↗ api.Element.securitypolicyviolation_event ↗ api.HTMLElement.nonce ↗ api.HTMLIFrameElement.csp ↗ api.SecurityPolicyViolationEvent ↗ api.SecurityPolicyViolationEvent.SecurityPolicyViolationEvent ↗ api.SecurityPolicyViolationEvent.blockedURI ↗ api.SecurityPolicyViolationEvent.columnNumber ↗ api.SecurityPolicyViolationEvent.disposition ↗ api.SecurityPolicyViolationEvent.documentURI ↗ api.SecurityPolicyViolationEvent.effectiveDirective ↗ api.SecurityPolicyViolationEvent.lineNumber ↗ api.SecurityPolicyViolationEvent.originalPolicy ↗ api.SecurityPolicyViolationEvent.referrer ↗ api.SecurityPolicyViolationEvent.sample ↗ api.SecurityPolicyViolationEvent.sourceFile ↗ api.SecurityPolicyViolationEvent.statusCode ↗ api.SecurityPolicyViolationEvent.violatedDirective ↗ api.SecurityPolicyViolationEvent.worker_support ↗ api.WorkerGlobalScope.securitypolicyviolation_event ↗ html.elements.iframe.csp ↗ html.elements.meta.http-equiv.content-security-policy ↗ html.global_attributes.nonce ↗ http.headers.Content-Security-Policy ↗ http.headers.Content-Security-Policy-Report-Only ↗ http.headers.Content-Security-Policy.base-uri ↗ http.headers.Content-Security-Policy.child-src ↗ http.headers.Content-Security-Policy.connect-src ↗ http.headers.Content-Security-Policy.default-src ↗ http.headers.Content-Security-Policy.font-src ↗ http.headers.Content-Security-Policy.form-action ↗ http.headers.Content-Security-Policy.frame-ancestors ↗ http.headers.Content-Security-Policy.frame-src ↗ http.headers.Content-Security-Policy.img-src ↗ http.headers.Content-Security-Policy.manifest-src ↗ http.headers.Content-Security-Policy.media-src ↗ http.headers.Content-Security-Policy.meta-element-support ↗ http.headers.Content-Security-Policy.object-src ↗ http.headers.Content-Security-Policy.report-sample ↗ http.headers.Content-Security-Policy.sandbox ↗ http.headers.Content-Security-Policy.script-src ↗ http.headers.Content-Security-Policy.script-src-attr ↗ http.headers.Content-Security-Policy.script-src-elem ↗ http.headers.Content-Security-Policy.script-src.external_scripts ↗ http.headers.Content-Security-Policy.script-src.wasm-unsafe-eval ↗ http.headers.Content-Security-Policy.strict-dynamic ↗ http.headers.Content-Security-Policy.style-src ↗ http.headers.Content-Security-Policy.style-src-attr ↗ http.headers.Content-Security-Policy.style-src-elem ↗ http.headers.Content-Security-Policy.unsafe-hashes ↗ http.headers.Content-Security-Policy.worker-src ↗ http.headers.Content-Security-Policy.worker_support ↗