: script-src ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src)
    24. [ ` CSP: script-src-attr ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src-attr)
    25. [ ` CSP: script-src-elem ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src-elem)
    26. [ ` CSP: style-src ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src)
    27. [ ` CSP: style-src-attr ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-attr)
    28. [ ` CSP: style-src-elem ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-elem)
    29. [ ` CSP: trusted-types ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types) Experimental 
    30. [ ` CSP: upgrade-insecure-requests ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests)
    31. [ ` CSP: worker-src ` ](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/worker-src)
  22. CORS errors 
    1. [ Reason: CORS disabled ](/en-US/docs/Web/HTTP/CORS/Errors/CORSDisabled)
    2. [ Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSAllowOriginNotMatchingOrigin)
    3. [ Reason: CORS header 'Access-Control-Allow-Origin' missing ](/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin)
    4. [ Reason: CORS header 'Origin' cannot be added ](/en-US/docs/Web/HTTP/CORS/Errors/CORSOriginHeaderNotAdded)
    5. [ Reason: CORS preflight channel did not succeed ](/en-US/docs/Web/HTTP/CORS/Errors/CORSPreflightDidNotSucceed)
    6. [ Reason: CORS request did not succeed ](/en-US/docs/Web/HTTP/CORS/Errors/CORSDidNotSucceed)
    7. [ Reason: CORS request external redirect not allowed ](/en-US/docs/Web/HTTP/CORS/Errors/CORSExternalRedirectNotAllowed)
    8. [ Reason: CORS request not HTTP ](/en-US/docs/Web/HTTP/CORS/Errors/CORSRequestNotHttp)
    9. [ Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials)
    10. [ Reason: Did not find method in CORS header 'Access-Control-Allow-Methods' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSMethodNotFound)
    11. [ Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSMIssingAllowCredentials)
    12. [ Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSInvalidAllowHeader)
    13. [ Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods' ](/en-US/docs/Web/HTTP/CORS/Errors/CORSInvalidAllowMethod)
    14. [ Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel ](/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowHeaderFromPreflight)
    15. [ Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed ](/en-US/docs/Web/HTTP/CORS/Errors/CORSMultipleAllowOriginNotAllowed)
  23. Permissions-Policy directives 
    1. [ Permissions-Policy: accelerometer ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/accelerometer) Experimental 
    2. [ Permissions-Policy: ambient-light-sensor ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/ambient-light-sensor) Experimental 
    3. [ Permissions-Policy: autoplay ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/autoplay) Experimental 
    4. [ Permissions-Policy: battery ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/battery) Experimental 
    5. [ Permissions-Policy: bluetooth ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/bluetooth) Experimental 
    6. [ Permissions-Policy: browsing-topics ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/browsing-topics) Experimental  Non-standard 
    7. [ Permissions-Policy: camera ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/camera)
    8. [ Permissions-Policy: display-capture ](/en-US/docs/Web/HTTP/Headers/Permissions-Policy/display-capture)
    9. [ Permissions-Policy: document-domain ](/en-US/docs/Web/HTTP/Headers/Pe