|
Lines 553-566
__END_SRU_PUBLICSERVER__
Link Here
|
| 553 |
<!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. --> |
553 |
<!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. --> |
| 554 |
<csp_mode></csp_mode> |
554 |
<csp_mode></csp_mode> |
| 555 |
<!-- defines the value of the CSP header. _CSP_NONCE_ can be used as a placeholder for the generated CSP nonce. --> |
555 |
<!-- defines the value of the CSP header. _CSP_NONCE_ can be used as a placeholder for the generated CSP nonce. --> |
| 556 |
<csp_header_value>default-src 'self'; script-src 'self' 'nonce-_CSP_NONCE_'; style-src 'self' 'nonce-_CSP_NONCE_'; style-src-attr 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'</csp_header_value> |
556 |
<csp_header_value></csp_header_value> |
| 557 |
</opac> |
557 |
</opac> |
| 558 |
|
558 |
|
| 559 |
<intranet> |
559 |
<intranet> |
| 560 |
<!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. --> |
560 |
<!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. --> |
| 561 |
<csp_mode></csp_mode> |
561 |
<csp_mode></csp_mode> |
| 562 |
<!-- defines the value of the CSP header. _CSP_NONCE_ can be used as a placeholder for the generated CSP nonce. --> |
562 |
<!-- defines the value of the CSP header. _CSP_NONCE_ can be used as a placeholder for the generated CSP nonce. --> |
| 563 |
<csp_header_value>default-src 'self'; script-src 'self' 'nonce-_CSP_NONCE_'; style-src 'self' 'nonce-_CSP_NONCE_'; style-src-attr 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'</csp_header_value> |
563 |
<csp_header_value></csp_header_value> |
| 564 |
</intranet> |
564 |
</intranet> |
| 565 |
</content_security_policy> |
565 |
</content_security_policy> |
| 566 |
|
566 |
|