package content_security_policy

  1. Overview
  2. Docs

Module Content_security_policy.MonoidSource

Sourceval empty : t

The empty policy. This policy is equivalent to the following:

base-uri 'self'; form-action 'self'; frame-ancestors 'self'; block-all-mixed-content; default-src 'self';

Sourceval combine : t -> t -> t

combine merges the two policies, producing a policy that accepts the set of requests that is the union of both inputs.

Sourceval (|.|) : t -> t -> t

An operator alias for combine.

Sourceval reduce : t list -> t

reduce merges all the items in the list

Sourceval finalize : t -> t

returns a Csp.t for use in our various web-server libraries.

Constructors

Sourceval report_uri : string -> t
Sourceval base_uri : string -> t
Sourceval form_action : string -> t
Sourceval frame_ancestor : string -> t
Sourceval insecure_requests : [ `Allow | `Block | `Upgrade ] -> t
Sourceval fetch : Fetch_type.t -> Source.t -> t