Info about the CSP header

Home
eperi sEcure Platform
Information and resources to help you get started installing, configuring and managing eperi sEcure Platform.
Configuration How-Tos
This section describes additional technical configuration tasks that are required as needed.
Info about the CSP header
As a safety measure, the Content Security Policy (CSP) header is set by default in the eperi sEcure Platform.

Info about the CSP header

As a safety measure, the Content Security Policy (CSP) header is set by default in the eperi sEcure Platform.

The following HTTP header is set in the eperi sEcure Platform:

Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline';

X-Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline';