import {t} from 'sentry/locale'; const effectiveDirectives = { 'base-uri': t( `The base-uri directive defines the URIs that a user agent may use as the document base URL. If this value is absent, then any URI is allowed. If this directive is absent, the user agent will use the value in the <base> element.` ), 'child-src': t( `The child-src directive defines the valid sources for web workers and nested browsing contexts loaded using elements such as <frame> and <iframe>.` ), 'connect-src': t( `The connect-src directive defines valid sources for fetch, XMLHttpRequest, WebSocket, and EventSource connections.` ), 'font-src': t( `The font-src directive specifies valid sources for fonts loaded using @font-face.` ), 'form-action': t( `The form-action directive specifies valid endpoints for <form> submissions.` ), 'frame-ancestors': t( `The frame-ancestors directive specifies valid parents that may embed a page using the <frame> and <iframe> elements.` ), 'img-src': t( `The img-src directive specifies valid sources of images and favicons.` ), 'prefetch-src': t( `The prefetch-src directive restricts the URLs from which resources may be prefetched or prerendered.` ), 'manifest-src': t( `The manifest-src directive specifies which manifest can be applied to the resource.` ), 'media-src': t( `The media-src directive specifies valid sources for loading media using the <audio> and <video> elements.` ), 'object-src': t( `The object-src directive specifies valid sources for the <object>, <embed>, and <applet> elements.` ), 'plugin-types': t( `The plugin-types directive specifies the valid plugins that the user agent may invoke.` ), referrer: t( `The referrer directive specifies information in the Referer header for links away from a page.` ), 'script-src': t( `The script-src directive specifies valid sources for JavaScript. When either the script-src or the default-src directive is included, inline script and eval() are disabled unless you specify 'unsafe-inline' and 'unsafe-eval', respectively.` ), 'script-src-elem': t( `The script-src-elem directive applies to all script requests and element contents. It does not apply to scripts defined in attributes.` ), 'script-src-attr': t( `The script-src-attr directive applies to event handlers and, if present, it will override the script-src directive for relevant checks.` ), 'style-src': t( `The style-src directive specifies valid sources for stylesheets. This includes both externally-loaded stylesheets and inline use of the <style> element and HTML style attributes. Stylesheets from sources that aren't included in the source list are not requested or loaded. When either the style-src or the default-src directive is included, inline use of the <style> element and HTML style attributes are disabled unless you specify 'unsafe-inline'.` ), 'style-src-elem': t( `The style-src-elem directive applies to all styles except those defined in inline attributes.` ), 'style-src-attr': t( `The style-src-attr directive applies to inline style attributes and, if present, it will override the style-src directive for relevant checks.` ), 'frame-src': t( `The frame-src directive specifies valid sources for nested browsing contexts loading using elements such as <frame> and <iframe>.` ), 'worker-src': t( `The worker-src directive specifies valid sources for Worker, SharedWorker, or ServiceWorker scripts.` ), }; export default effectiveDirectives;