/testing/web-platform/meta/content-security-policy/

• ../
• base-uri
• blob
• child-src
• connect-src
• default-src
• embedded-enforcement
• font-src
• form-action
• frame-ancestors
• frame-src
• gen
• generic
• img-src
• inheritance
• inside-worker
• media-src
• meta
• navigate-to
• navigation
• nonce-hiding
• object-src
• plugin-types
• prefetch-src
• reporting-api
• reporting
• resource-hints
• sandbox
• script-src-attr-elem
• script-src
• securitypolicyviolation
• style-src-attr-elem
• style-src
• svg
• unsafe-eval
• unsafe-hashes
• wasm-unsafe-eval
• webrtc
• worker-src