Class CspSandboxBuilder
Helper functions for configuring content security policy rules related to a sandbox.
Inherited Members
Namespace: IRM.AspNetCore.Http.Headers.Builder
Assembly: IRM.AspNetCore.Mvc.dll
Syntax
public class CspSandboxBuilder : CspDirectiveBuilder<ContentSecurityPolicySandbox>
Methods
AllowForms()
Allow submission of forms.
Declaration
public CspSandboxBuilder AllowForms()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowModals()
Allow modal windows.
Declaration
public CspSandboxBuilder AllowModals()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowOrientationLock()
Allow to disable the ability to lock the screen orientation.
Declaration
public CspSandboxBuilder AllowOrientationLock()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowPointerLock()
Allow to use the Pointer Lock API.
Declaration
public CspSandboxBuilder AllowPointerLock()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowPopups()
Allow pop-ups, e.g. ones created with window.open().
Declaration
public CspSandboxBuilder AllowPopups()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowPopupsToEscapeSandbox()
Allow pop-ups opened to run outside the sandbox.
Declaration
public CspSandboxBuilder AllowPopupsToEscapeSandbox()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowPresentation()
Allow embedders to have control over whether an iframe can start a presentation session.
Declaration
public CspSandboxBuilder AllowPresentation()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowSameOrigin()
Allow the content to be treated as being from its normal origin. If this exception is not enabled, the embedded content is treated as being from a unique origin.
Declaration
public CspSandboxBuilder AllowSameOrigin()
Returns
CspSandboxBuilder
The builder for call chaining |
AllowScripts()
Allow execution of JavaScript.
Declaration
public CspSandboxBuilder AllowScripts()
Returns
CspSandboxBuilder
The builder for call chaining |