From 0e4db718cb8a7600994976cec3d1773289902eb3 Mon Sep 17 00:00:00 2001 From: wbamberg Date: Wed, 2 Oct 2024 11:52:19 -0700 Subject: [PATCH] Mention 'none' in source values page --- .../web/http/headers/content-security-policy/sources/index.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/files/en-us/web/http/headers/content-security-policy/sources/index.md b/files/en-us/web/http/headers/content-security-policy/sources/index.md index ee99555a7141a53..6a861f36c20797b 100644 --- a/files/en-us/web/http/headers/content-security-policy/sources/index.md +++ b/files/en-us/web/http/headers/content-security-policy/sources/index.md @@ -15,6 +15,8 @@ As well as fetch directives, some other CSP directives may take as a value a spa - {{CSP("form-action")}} - {{CSP("frame-ancestors")}} +Directives that accept a list of source expressions may instead be given the single value `'none'`, indicating that no resources of the given type may be loaded (or, in the case of non-fetch directives, that the given ability is not allowed). + ## Sources - ``