<span class="hljs-attribute">Content-Security-Policy</span>:
<span class="hljs-keyword">default-src</span> <span class="hljs-string">'self'</span>;
<span class="hljs-keyword">style-src</span> <span class="hljs-string">'self'</span> css.example.com;
<span class="hljs-keyword">img-src</span> *.example.com;
<span class="hljs-keyword">script-src</span> <span class="hljs-string">'unsafe-eval'</span> <span class="hljs-string">'self'</span> js.example.com <span class="hljs-string">'nonce-Nc3n83cnSAd3wc3Sasdfn939hc3'</span>
|