/files/ja/web/http/headers/content-security-policy/

• ../
• base-uri
• block-all-mixed-content
• connect-src
• default-src
• frame-ancestors
• frame-src
• img-src
• index.md
• manifest-src
• media-src
• object-src
• plugin-types
• prefetch-src
• referrer
• report-to
• require-sri-for
• sandbox
• script-src-elem
• script-src
• style-src
• trusted-types
• upgrade-insecure-requests
• worker-src