` element. * * Will default to self if not overridden * * @var string|string[]|null */ public $baseURI = null; /** * Lists the URLs for workers and embedded frame contents * * @var string|string[] */ public $childSrc = 'self'; /** * Limits the origins that you can connect to (via XHR, * WebSockets, and EventSource). * * @var string|string[] */ public $connectSrc = 'self'; /** * Specifies the origins that can serve web fonts. * * @var string|string[] */ public $fontSrc = null; /** * Lists valid endpoints for submission from `

` tags. * * @var string|string[] */ public $formAction = 'self'; /** * Specifies the sources that can embed the current page. * This directive applies to ``, `