Skip to content

Instantly share code, notes, and snippets.

@zaxbux
Created January 27, 2023 00:15
Show Gist options
  • Save zaxbux/4b50be7cc5deecf684468b376d9d5b4d to your computer and use it in GitHub Desktop.
Save zaxbux/4b50be7cc5deecf684468b376d9d5b4d to your computer and use it in GitHub Desktop.
CSP Policies

Cloudflare 1

Web Analytics

script-src static.cloudflareinsights.com;
connect-src cloudflareinsights.com;

Turnstile 2

script-src https://challenges.cloudflare.com;
frame-src https://challenges.cloudflare.com;

Google

Fonts

style-src fonts.googleapis.com;
font-src fonts.gstatic.com;

Footnotes

  1. https://developers.cloudflare.com/fundamentals/get-started/reference/content-security-policies/

  2. https://developers.cloudflare.com/turnstile/frequently-asked-questions/#how-does-content-security-policy-need-to-be-configured-for-turnstile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment