default-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

script-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

style-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

img-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

font-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

connect-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

frame-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

media-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

object-src

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

base-uri

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

form-action

'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:

输出格式：

Content-Security-Policy: default-src 'self'