doughnut-wedding/app/config/csp.json

49 lines
878 B
JSON
Raw Normal View History

2017-02-10 21:34:31 -08:00
{
"report-only": false,
"report-uri": "/csp_violation_reporting_endpoint",
"base-uri": [],
"default-src": {
"self": true
},
"child-src": {
"allow": [
"https://www.youtube.com",
"https://www.youtube-nocookie.com"
],
"self": false
},
"connect-src": {
"self": true
},
"font-src": {
"self": true,
"data": true
},
"form-action": {
"allow": [
"http://localhost.doughnutwedding.com"
],
"self": true
},
"frame-ancestors": [],
"img-src": {
"self": true,
"data": true
},
"media-src": [],
"object-src": [],
"plugin-types": [],
"script-src": {
"allow": [
"https://www.google-analytics.com"
],
"self": true,
"unsafe-inline": true,
"unsafe-eval": true
},
"style-src": {
"self": true,
"unsafe-inline":true
},
"upgrade-insecure-requests": false
}