Skip to main content

Interface: UiResourceCsp

Defined in: registerAppResource.ts:43

Origins an app's view is allowed to reach, mapped by the host onto the iframe's Content Security Policy. Anything not declared is blocked: an omitted list is the restrictive default, not "no restriction".

Properties​

baseUriDomains?​

optional baseUriDomains?: string[]

Defined in: registerAppResource.ts:54

Allowed document base URIs (base-uri).

connectDomains?​

optional connectDomains?: string[]

Defined in: registerAppResource.ts:45

Origins for network requests (connect-src).

frameDomains?​

optional frameDomains?: string[]

Defined in: registerAppResource.ts:52

Origins for nested iframes (frame-src).

resourceDomains?​

optional resourceDomains?: string[]

Defined in: registerAppResource.ts:50

Origins for scripts, styles, images, fonts and media (script-src, style-src, img-src, font-src, media-src).