default-src
script-src
style-src
img-src
font-src
connect-src
media-src
object-src
frame-src
child-src
worker-src
manifest-src
base-uri
form-action
frame-ancestors
navigate-to
report-uri
report-to
upgrade-insecure-requests inactive
This directive is emitted without any values.
block-all-mixed-content inactive
This directive is emitted without any values.