Page output · Question 11 of 12
How is the Content Security Policy enabled in the frontend?
2 answers are correct. Hard
Show answer
Answer
- C Via the feature toggles security.frontend.enforceContentSecurityPolicy or security.frontend.reportContentSecurityPolicy
- D Via a site file csp.yaml with the disposition enforce or report
Explanation
In the frontend CSP is off by default; in the backend TYPO3 always enforces the policies.