> For the complete documentation index, see [llms.txt](https://docs.wem.io/platform/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wem.io/platform/wemreference/wmt/reference/csp.md). # CSP {% hint style="info" %} The **`Csp`** template part is used to configure the Content Security Policy for the current design template. {% endhint %} ### Syntax `<% Csp`` ``directive-name` `value-1` `value-2`` ``...`` ``value-n`` ``%>` ### Directive Names The table below lists the valid directive names accepted by the WEM runtime.


`directive-name`	Remarks
child-src	Fetch directive
connect-src	Fetch directive
default-src	Fetch directive
frame-src	Fetch directive
font-src	Fetch directive
img-src	Fetch directive
manifest-src	Fetch directive
media-src	Fetch directive
object-src	Fetch directive
script-src	Fetch directive
script-src-attr	Fetch directive
script-src-elem	Fetch directive
style-src	Fetch directive
style-src-attr	Fetch directive
style-src-elem	Fetch directive
worker-src	Fetch directive
base-uri	Document directive
sandbox	Document directive
form-action	Navigation directive
frame-ancestors	Navigation directive
report-to	Reporting directive
upgrade-insecure-requests	Miscellaneous

### Directive Values Example values include: `https:`, `'sha256-ex2O7MWOzfdzthhKmdazheryN6oERSF8PrdvxrtP8dI='`, `http://*.example.com`, `'none'`, `'self'`, and `data:`. ### Example ```html <% Csp img-src data: https://static.my-website.com %> <% Csp font-src https://cdn.my-open-fonts.com %> <% Csp script-src https://static.my-website.com https://cdn.other-website.com 'sha256-eReahVJiG1zBXPQyxX0V6oAxkfiBdmaNffG9eZWSUxc=' %> ``` --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.wem.io/platform/wemreference/wmt/reference/csp.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.