Optional
childOptional
connectRestricts the URLs that can be loaded using script interfaces.
Optional
connectRestricts the URLs that can be connected to websockets (all sources will be prefixed with 'wss://').
Optional
Readonly
createdThe UTC timestamp when the CSP entry was created.
Optional
descriptionThe reason for adding this origin to the Content Security Policy.
Optional
fontSpecifies valid sources for loading fonts.
Optional
formAllow forms to be submitted to the origin.
Optional
frameSpecifies valid sources for embedding the resource using frame, iFrame, object, embed and applet.
Optional
frameSpecifies valid sources for loading nested browsing contexts using elements such as frame and iFrame.
Optional
imgSpecifies valid sources of images and favicons.
Optional
mediaSpecifies valid sources for loading media using the audio and video elements.
Optional
Readonly
modifiedThe UTC timestamp when the CSP entry was last modified.
Optional
nameThe name for this entry.
Optional
objectSpecifies valid sources for the object, embed, and applet elements.
The origin that the CSP directives should be applied to.
Optional
scriptSpecifies valid sources for JavaScript.
Optional
styleSpecifies valid sources for stylesheets.
Optional
workerSpecifies valid sources for Worker, SharedWorker, or ServiceWorker scripts.
Defines the valid sources for loading web workers and nested browsing contexts using elements such as frame and iFrame.