contentSecurityPolicy property

String? contentSecurityPolicy

Opt-in: a wrong CSP breaks the page, so there is no safe default. A reasonable starting point for a server-rendered app is "default-src 'self'".

Implementation

final String? contentSecurityPolicy;