CSPAllowlistRestApi.post

descriptionstringnullable

directivestring

The CSP directive to widen. Defaults to 'frame-src'. One of: child-src, connect-src, font-src, frame-src, img-src, media-src.

Default value: frame-src

domainstringrequired

A bare origin to allow, e.g. 'https://example.com' or 'https://example.com:8443'. Wildcards, paths, query strings and fragments are rejected.

CSPAllowlistRestApi.post

{
  "description": "string",
  "directive": "frame-src",
  "domain": "string"
}