Implement two fields in sys config:
CSP Header enabled [dropdown: yes|no]
CSP Header [textfield]
if feature is
turned off: nothing happens
turned on, field empty: only local assets are loaded
turned on, field filled: separate domains by comma or new line and add them as valid external resources
default is: feature is turned off
Implement two fields in sys config:
CSP Header enabled [dropdown: yes|no]
CSP Header [textfield]
if feature is
turned off: nothing happens
turned on, field empty: only local assets are loaded
turned on, field filled: separate domains by comma or new line and add them as valid external resources
default is: feature is turned off