3 ms·

https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP Content-Security-Policy: default-src 'none';

• zoobab 7y ago
  Not like this?: Content-Security-Policy: script-src 'none';
  • moviuro 7y ago
    Probably yours, yes. On my own blog, I use: default-src 'self'; base-uri 'self'; style-src 'unsafe-inline' 'self'