Manual:$wgCSPReportOnlyHeader/pl
| Bezpieczeństwo: $wgCSPReportOnlyHeader | |
|---|---|
| Controls Content-Security-Policy-Report-Only header [Experimental] |
|
| Wprowadzono w wersji: | 1.32.0 (Gerrit change 253969; git #70941efd) |
| Usunięto w wersji: | nadal w użyciu |
| Dozwolone wartości: | (boolean or array) |
| Domyślna wartość: | false |
| Inne ustawienia: Alfabetycznie | Według funkcji | |
Szczegóły
This config option is exactly the same as $wgCSPHeader. Please see the documentation for that config option. The only difference is that this config doesn't block any requests. It only shows errors in the web browser javascript console, as well as the csp-report-only MediaWiki debug log (As opposed to the 'csp' debug log for the main header). You can set this to an entirely different value than $wgCSPHeader, if you want to test a potentially change before implementing it.