CSP child-src

Legacy directive covering frames and workers. Superseded by frame-src and worker-src.

Falls back to

default-src

Group

Fetch directives

Detail

Kept for backwards compatibility. Current browsers use frame-src and worker-src, falling back to child-src only when those are absent. New policies should set the specific directives instead.

Example

Analyse a full policy → · Generate one →