Build Content-Security-Policy headers with a visual directive editor.
default-srcFallback for other directivesscript-srcValid sources for JavaScriptstyle-srcValid sources for stylesheetsimg-srcValid sources for imagesdefault-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: