Content Security Policy Level 3

1. Policy delivery

   Content-Security-Policy and Report-Only header delivery.

2. Fetch directives

   default-src, script-src, style-src, img-src, connect-src.

3. script-src and nonces

   Nonces, hashes and strict-dynamic.

4. Document directives

   base-uri and sandbox.

5. Navigation directives

   form-action and frame-ancestors.

6. Reporting directives

   report-to and violation reports.

7. Matching algorithms

   Source expression and URL matching.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.