Minor Changes
-
Build, parse, and edit a single policy with
ContentSecurityPolicy, exported from the package root andcontent-security-policysubpath. Initializers use camel-cased directives, source token arrays, and a single endpoint string forreportTo;get,set, anddeleteuse hyphenated names. (#12098)Parsing preserves the first duplicate directive and rejects policy lists.
report-torequires exactly one HTTP token. ExistingSuperHeadersCSP accessors retain their string API.