/files/fr/web/http/headers/content-security-policy/

• ../
• base-uri
• block-all-mixed-content
• child-src
• connect-src
• default-src
• font-src
• form-action
• frame-ancestors
• frame-src
• img-src
• index.html
• manifest-src
• media-src
• navigate-to
• object-src
• plugin-types
• prefetch-src
• referrer
• report-to
• report-uri
• require-sri-for
• require-trusted-types-for
• sandbox
• script-src-attr
• script-src-elem
• script-src
• style-src-attr
• style-src-elem
• style-src
• trusted-types
• upgrade-insecure-requests
• worker-src