On this page can set the Content Security Policy (CSP) and various other security HTTP headers.

External link

The CSP header comes with default policy

Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval'

editable in the GUI. The Domains Allowed field values extend the policy with external source domain directives.

The Other Headers section allows adding miscellaneous headers, the format required is
Header-Name:header value #1;header value #2;
We set the following security headers by default:

Can add up to 20 additional headers in this section. This may be extended in future releases.

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
webinterfacecsp.jpg 109.0 kB 1 05-Dec-2023 05:32 Ada Csaba
webinterfacecsp_2.jpg 339.0 kB 1 05-Dec-2023 05:32 Ada Csaba
« This page (revision-28) was last changed on 05-Dec-2023 05:32 by Ada Csaba
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by