# Supported CSP Directives

| Directive                   | Category                  | Supported special values                                                                                          | Alerting Enabled | Example usage                                                                     |
| --------------------------- | ------------------------- | ----------------------------------------------------------------------------------------------------------------- | ---------------- | --------------------------------------------------------------------------------- |
| `script-src`                | Scripts                   | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | Yes              | `script-src stripe.com *.stripe.com ;`                                            |
| `connect-src`               | Connections               | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>` | Yes              | `connect-src 'unsafe-inline' https://www.shop.stg.bcxg.sfcc-store-internal.net ;` |
| `default-src`               | Default                   | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               | `default-src *.js.stripe.com 'unsafe-eval' 'unsafe-inline' ;`                     |
| `img-src`                   | Images                    | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               | `img-src 'self' 'unsafe-inline' ;`                                                |
| `style-src`                 | Styles                    | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `font-src`                  | Fonts                     | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `object-src`                | Objects                   | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `media-src`                 | Media                     | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `child-src`                 | Child                     | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `form-action`               | Form actions              | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `worker-src`                | Workers                   | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `base-uri`                  | Base URI                  | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `manifest-src`              | Manifests                 | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `frame-src`                 | Frames                    | <ul><li>`'none'`</li><li>`'self'`</li><li>`'unsafe-inline'`</li><li>`'unsafe-eval'`</li><li>`'<HASH>'`</li></ul>  | No               |                                                                                   |
| `frame-ancestors`           | Frame ancestors           | <ul><li>`'none'`</li><li>`'self'`</li></ul>                                                                       | No               |                                                                                   |
| `upgrade-insecure-requests` | Upgrade insecure requests | N/A                                                                                                               | No               |                                                                                   |