org.graylog2.security.csp.config Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of graylog2-server Show documentation

Graylog

There is a newer version: 6.1.4

######################################################
# GRAYLOG SECURITY CONTENT POLICY CONFIGURATION FILE #
######################################################
#
# Use this file to configure additional CSP directive values. These will be merged with
# values specified via the @CSP annotation, if the group name matches.
#
# Entries are generally expected to be a single line of the form, one of the following:
#
# groupName.directive=value
#
# White space that appears between the directive and value is ignored,
# so the following are equivalent:
#
# test.name=Stephen
# test.name = Stephen
#
# White space at the beginning of the line is also ignored.
# Lines that start with the comment characters ! or # are ignored. Blank lines are also ignored.
# The value is generally terminated by the end of the line. White space following the
# value is not ignored, and is treated as part of the value.
#
# Example:
# default.img-src=my_imgsrc.com
# default.connect-src=my_connectsrc.com:9999

default.default-src='self'
default.style-src='self' 'unsafe-inline'
default.script-src='strict-dynamic' 'nonce-{nonce}' 'unsafe-eval'
default.img-src=data: 'self' https://*.tile.openstreetmap.org https://graylog.org

swagger.style-src='self' 'unsafe-inline'
swagger.script-src='self' 'unsafe-eval' 'unsafe-inline'
swagger.img-src='self'