CSP
目录
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- CSP: base-uri
- CSP: block-all-mixed-content
- CSP: child-src
- CSP: connect-src
- CSP: default-src
- CSP: font-src
- CSP: form-action
- CSP: frame-ancestors
- CSP: frame-src
- CSP: img-src
- CSP: manifest-src
- CSP: media-src
- CSP: object-src
- CSP: plugin-types
- CSP: referrer
- CSP: report-uri
- CSP: require-sri-for
- CSP: sandbox
- CSP: script-src
- CSP: style-src
- CSP: upgrade-insecure-requests
- CSP: worker-src