diff --git a/filter_plugins/csp_filters.py b/filter_plugins/csp_filters.py index 48dfc8d6..74965235 100644 --- a/filter_plugins/csp_filters.py +++ b/filter_plugins/csp_filters.py @@ -111,17 +111,18 @@ class FilterModule(object): """ try: directives = [ - 'default-src', - 'connect-src', - 'frame-ancestors', - 'frame-src', - 'script-src', - 'script-src-elem', - 'style-src', - 'font-src', - 'worker-src', - 'manifest-src', - 'media-src', + 'default-src', # Fallback source list for all content types not explicitly listed + 'connect-src', # Controls allowed URLs for XHR, WebSockets, EventSource, and fetch() + 'frame-ancestors', # Restricts which parent frames can embed this page via