@hypolite developer.mozilla.org/en-US/do…Is there a way to say default-src: none? Or just set no valid sources? not as I recall