Baseline Widely available
The HTTP Content-Security-Policy
:
img-src
ì§ìì´ë ì´ë¯¸ì§ ë° íë¹ì½ì ëíì¬ ì í¨í ì¶ì²ë¥¼ ì§ì í©ëë¤.
default-src
fallback Yes. If this directive is absent, the user agent will look for the default-src
directive. Syntax
img-src
ì ì±
ì ëí´ íë ì´ìì ì¶ì²ë¥¼ íì© í ì ììµëë¤.
Content-Security-Policy: img-src <source>; Content-Security-Policy: img-src <source> <source>;Sources
<source>
can be any one of the values listed in CSP Source Values.
Note that this same set of values can be used in all fetch directives (and a number of other directives).
Examples Violation casesCSP í¤ëê° ì£¼ì´ì§ ë:
Content-Security-Policy: img-src https://example.com/
ìëì <img>
íê·¸ê° ì°¨ë¨ëì´ ë¶ë¬ì¤ì§ ììµëë¤:
<img src="https://not-example.com/foo.jpg" alt="example picture" />
ëª
ì¸ì ë¸ë¼ì°ì í¸íì± See also
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4