Confirmed users
717
edits
Apps/Security: Difference between revisions
→Default CSP policy
| Line 78: | Line 78: | ||
==== Default CSP policy ==== | ==== Default CSP policy ==== | ||
The CSP policy applied to all | The CSP policy applied to all privileged and certified apps is: | ||
<code>default-src *; script-src 'self'; object-src 'none'; style-src 'self'</code> | <code>default-src *; script-src 'self'; object-src 'none'; style-src 'self'</code> | ||