phpcsm模板

<?php
// 配置phpcsm模板
$csmPolicy = [
    'default-src' => ["'self'"],
    'script-src' => ["'self'", "'unsafe-inline'", "https://example.com"],
    'style-src' => ["'self'", "'unsafe-inline'", "https://example.com"],
    'img-src' => ["'self'", "data:", "https://example.com"],
    'connect-src' => ["'self'", "wss://example.com"],
    'font-src' => ["'self'", "https://example.com"],
    'object-src' => ["'none'"],
    'media-src' => ["'self'", "https://example.com"],
    'frame-src' => ["'none'"],
];

header("Content-Security-Policy: " . implode("; ", $csmPolicy));
?>