# Minimal ownCloud Web CSP with the office frame origin; oCIS expands ${VAR}.
directives:
  default-src: ["'none'"]
  child-src: ["'self'"]
  connect-src: ["'self'", "blob:"]
  font-src: ["'self'", "data:"]
  frame-ancestors: ["'self'"]
  frame-src: ["'self'", "blob:", "https://${OFFICE_HOST}"]
  img-src: ["'self'", "data:", "blob:", "https://${OFFICE_HOST}"]
  manifest-src: ["'self'"]
  media-src: ["'self'"]
  object-src: ["'self'", "blob:"]
  script-src: ["'self'", "'unsafe-inline'"]
  style-src: ["'self'", "'unsafe-inline'"]