Const
Sent on every response a module or a RESPONSE_HEADERS rule does not override. The order is these defaults, then a header the module set, then the operator's rules. No default Content-Security-Policy: core's own pages need inline script and style.
RESPONSE_HEADERS
Content-Security-Policy
Sent on every response a module or a
RESPONSE_HEADERSrule does not override. The order is these defaults, then a header the module set, then the operator's rules. No defaultContent-Security-Policy: core's own pages need inline script and style.