CSP manifest-src
Where the web app manifest may be loaded from.
- Falls back to
default-src- Group
- Fetch directives
Detail
Narrow scope and low risk. Worth setting only for completeness on progressive web apps, where the manifest controls install behaviour and icons.
Example
manifest-src 'self'