Default Attribute Policy DescriptionThe HTTP Content-Security-Policy img-src directive specifies valid sources of images and favicons.