diff --git a/files/en-us/web/http/headers/content-security-policy/sources/index.md b/files/en-us/web/http/headers/content-security-policy/sources/index.md index ee99555a7141a53..6a861f36c20797b 100644 --- a/files/en-us/web/http/headers/content-security-policy/sources/index.md +++ b/files/en-us/web/http/headers/content-security-policy/sources/index.md @@ -15,6 +15,8 @@ As well as fetch directives, some other CSP directives may take as a value a spa - {{CSP("form-action")}} - {{CSP("frame-ancestors")}} +Directives that accept a list of source expressions may instead be given the single value `'none'`, indicating that no resources of the given type may be loaded (or, in the case of non-fetch directives, that the given ability is not allowed). + ## Sources - ``