Content Security Policy Browser Support
Last updated: 09/28/2022
Content Security Policy
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Added in v. 10 |
Opera | Added in v. 15 |
Opera (on Android) | Added in v. ? |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
base-uri
Google Chrome | Added in v. 40 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 79 |
Firefox | Added in v. 35 |
Firefox (on Android) | Added in v. 35 |
Internet Explorer | Not supported |
Opera | Added in v. 27 |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 9.3 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
block-all-mixed-content
Google Chrome | Added in v. ? |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. ≤79 |
Firefox | Added in v. 48 |
Firefox (on Android) | Added in v. 48 |
Internet Explorer | Not supported |
Opera | Added in v. ? |
Opera (on Android) | Unknown |
Safari | Unknown |
Safari (on iOS) | Unknown |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
child-src
Google Chrome | Added in v. 40 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 15 |
Firefox | Added in v. 45 |
Firefox (on Android) | Added in v. 45 |
Internet Explorer | Not supported |
Opera | Added in v. 27 |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 9.3 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
connect-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
default-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
font-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
form-action
Google Chrome | Added in v. 40 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 15 |
Firefox | Added in v. 36 |
Firefox (on Android) | Added in v. 36 |
Internet Explorer | Not supported |
Opera | Added in v. 27 |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 9.3 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
frame-ancestors
Google Chrome | Added in v. 40 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 15 |
Firefox | Added in v. 33 |
Firefox (on Android) | Added in v. 33 |
Internet Explorer | Not supported |
Opera | Added in v. 26 |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 9.3 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Unknown |
frame-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
img-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
manifest-src
Google Chrome | Added in v. ? |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 79 |
Firefox | Added in v. 41 |
Firefox (on Android) | Added in v. 41 |
Internet Explorer | Not supported |
Opera | Added in v. ? |
Opera (on Android) | Unknown |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
media-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
meta-element-support
Google Chrome | Added in v. ? |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. ≤18 |
Firefox | Added in v. 45 |
Firefox (on Android) | Added in v. 45 |
Internet Explorer | Not supported |
Opera | Added in v. ? |
Opera (on Android) | Added in v. ? |
Safari | Added in v. ? |
Safari (on iOS) | Added in v. ? |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
navigate-to
Google Chrome | Not supported |
Google Chrome (on Android) | Not supported |
Edge | Not supported |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Not supported |
Opera (on Android) | Not supported |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Not supported |
Webview (on Android) | Not supported |
object-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
plugin-types
Google Chrome | Removed |
Google Chrome (on Android) | Removed |
Edge | Removed |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Removed |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 9.3 |
Samsung Browser (on Android) | Removed |
Webview (on Android) | Removed |
prefetch-src
Google Chrome | Not supported |
Google Chrome (on Android) | Not supported |
Edge | Not supported |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Not supported |
Opera (on Android) | Not supported |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Not supported |
Webview (on Android) | Not supported |
referrer
Google Chrome | Removed |
Google Chrome (on Android) | Removed |
Edge | Not supported |
Firefox | Removed |
Firefox (on Android) | Removed |
Internet Explorer | Not supported |
Opera | Removed |
Opera (on Android) | Removed |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Removed |
Webview (on Android) | Removed |
report-sample
Google Chrome | Added in v. 59 |
Google Chrome (on Android) | Added in v. 59 |
Edge | Added in v. ≤79 |
Firefox | Unknown |
Firefox (on Android) | Unknown |
Internet Explorer | Unknown |
Opera | Added in v. 46 |
Opera (on Android) | Added in v. 43 |
Safari | Added in v. 15.4 |
Safari (on iOS) | Added in v. 15.4 |
Samsung Browser (on Android) | Added in v. 7.0 |
Webview (on Android) | Added in v. 59 |
report-to
Google Chrome | Added in v. 70 |
Google Chrome (on Android) | Added in v. 70 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Not supported |
Opera (on Android) | Not supported |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 10.0 |
Webview (on Android) | Added in v. 70 |
report-uri
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
require-sri-for
Google Chrome | Added in v. 54 |
Google Chrome (on Android) | Added in v. 54 |
Edge | Added in v. 79 |
Firefox | Removed |
Firefox (on Android) | Removed |
Internet Explorer | Not supported |
Opera | Added in v. 41 |
Opera (on Android) | Added in v. 41 |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 6.0 |
Webview (on Android) | Added in v. 54 |
require-trusted-types-for
Google Chrome | Added in v. 83 |
Google Chrome (on Android) | Added in v. 83 |
Edge | Added in v. 83 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 69 |
Opera (on Android) | Added in v. 59 |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 13.0 |
Webview (on Android) | Added in v. 83 |
sandbox
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 50 |
Firefox (on Android) | Added in v. 50 |
Internet Explorer | Added in v. 10 |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
script-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
script-src-attr
Google Chrome | Added in v. 75 |
Google Chrome (on Android) | Added in v. 75 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 62 |
Opera (on Android) | Unknown |
Safari | Added in v. preview |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 11.0 |
Webview (on Android) | Added in v. 75 |
script-src-elem
Google Chrome | Added in v. 75 |
Google Chrome (on Android) | Added in v. 75 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 62 |
Opera (on Android) | Unknown |
Safari | Added in v. preview |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 11.0 |
Webview (on Android) | Added in v. 75 |
strict-dynamic
Google Chrome | Added in v. 52 |
Google Chrome (on Android) | Added in v. 52 |
Edge | Added in v. 79 |
Firefox | Added in v. 52 |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 39 |
Opera (on Android) | Added in v. 41 |
Safari | Added in v. 15.4 |
Safari (on iOS) | Added in v. 15.4 |
Samsung Browser (on Android) | Added in v. 6.0 |
Webview (on Android) | Added in v. 52 |
style-src
Google Chrome | Added in v. 25 |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. 14 |
Firefox | Added in v. 23 |
Firefox (on Android) | Added in v. 23 |
Internet Explorer | Not supported |
Opera | Added in v. 15 |
Opera (on Android) | Unknown |
Safari | Added in v. 7 |
Safari (on iOS) | Added in v. 7 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
style-src-attr
Google Chrome | Added in v. 75 |
Google Chrome (on Android) | Added in v. 75 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 62 |
Opera (on Android) | Unknown |
Safari | Added in v. preview |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 11.0 |
Webview (on Android) | Added in v. 75 |
style-src-elem
Google Chrome | Added in v. 75 |
Google Chrome (on Android) | Added in v. 75 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 62 |
Opera (on Android) | Unknown |
Safari | Added in v. preview |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 11.0 |
Webview (on Android) | Added in v. 75 |
trusted-types
Google Chrome | Added in v. 83 |
Google Chrome (on Android) | Added in v. 83 |
Edge | Added in v. 83 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 69 |
Opera (on Android) | Not supported |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 13.0 |
Webview (on Android) | Added in v. 83 |
unsafe-hashes
Google Chrome | Added in v. 69 |
Google Chrome (on Android) | Added in v. 69 |
Edge | Added in v. 79 |
Firefox | Not supported |
Firefox (on Android) | Not supported |
Internet Explorer | Not supported |
Opera | Added in v. 56 |
Opera (on Android) | Added in v. 48 |
Safari | Added in v. 15.4 |
Safari (on iOS) | Added in v. 15.4 |
Samsung Browser (on Android) | Added in v. 10.0 |
Webview (on Android) | Added in v. 69 |
upgrade-insecure-requests
Google Chrome | Added in v. 43 |
Google Chrome (on Android) | Added in v. 43 |
Edge | Added in v. 17 |
Firefox | Added in v. 42 |
Firefox (on Android) | Added in v. 42 |
Internet Explorer | Not supported |
Opera | Added in v. 30 |
Opera (on Android) | Added in v. 30 |
Safari | Added in v. 10.1 |
Safari (on iOS) | Added in v. 10.3 |
Samsung Browser (on Android) | Added in v. 4.0 |
Webview (on Android) | Added in v. 43 |
worker_support
Google Chrome | Added in v. ? |
Google Chrome (on Android) | Added in v. ? |
Edge | Added in v. ≤79 |
Firefox | Added in v. 50 |
Firefox (on Android) | Added in v. 50 |
Internet Explorer | Not supported |
Opera | Unknown |
Opera (on Android) | Unknown |
Safari | Added in v. 10 |
Safari (on iOS) | Added in v. 10 |
Samsung Browser (on Android) | Added in v. ? |
Webview (on Android) | Added in v. ? |
worker-src
Google Chrome | Added in v. 59 |
Google Chrome (on Android) | Added in v. 59 |
Edge | Added in v. 79 |
Firefox | Added in v. 58 |
Firefox (on Android) | Added in v. 58 |
Internet Explorer | Not supported |
Opera | Added in v. 48 |
Opera (on Android) | Added in v. 45 |
Safari | Not supported |
Safari (on iOS) | Not supported |
Samsung Browser (on Android) | Added in v. 7.0 |
Webview (on Android) | Added in v. 59 |