Wildcard, allows any URL except data: blob: filesystem: schemes. Multiple source list values can be space separated with the exception of 'none' which should be the only value. Implementation Status Example navigate-to Policy navigate-to CSP Level 3Īll of the directives that end with -src support similar values known as a source list. If form-action is present then this directive is ignored for form submissions.
For example when a link is clicked, a form is submitted, or window.location is invoked. Restricts the URLs that the document may navigate to by any means.
0 kommentar(er)
