child-src

Default Attribute

self

Policy Description

The HTTP Content-Security-Policy (CSP) child-src directive defines the valid sources forĀ web workersĀ and nested browsing contexts loaded using elements such asĀ <frame>Ā andĀ <iframe>. For workers, non-compliant requests are treated as fatal network errors by the user agent.