1 /* This Source Code Form is subject to the terms of the Mozilla Public
2 * License, v. 2.0. If a copy of the MPL was not distributed with this file,
3 * You can obtain one at http://mozilla.org/MPL/2.0/. */
6 * Dictionary used to display CSP info.
10 boolean report-only = false;
12 sequence<DOMString> default-src;
13 sequence<DOMString> script-src;
14 sequence<DOMString> object-src;
15 sequence<DOMString> style-src;
16 sequence<DOMString> img-src;
17 sequence<DOMString> media-src;
18 sequence<DOMString> frame-src;
19 sequence<DOMString> font-src;
20 sequence<DOMString> connect-src;
21 sequence<DOMString> report-uri;
22 sequence<DOMString> frame-ancestors;
23 // sequence<DOMString> reflected-xss; // not supported in Firefox
24 sequence<DOMString> base-uri;
25 sequence<DOMString> form-action;
26 sequence<DOMString> referrer;
27 sequence<DOMString> manifest-src;
28 sequence<DOMString> upgrade-insecure-requests;
29 sequence<DOMString> child-src;
30 sequence<DOMString> block-all-mixed-content;
31 sequence<DOMString> sandbox;
32 sequence<DOMString> worker-src;
33 sequence<DOMString> script-src-elem;
34 sequence<DOMString> script-src-attr;
38 dictionary CSPPolicies {
39 sequence<CSP> csp-policies;