Document directive
In CSP, document directives are used in a Content-Security-Policy
header and govern the properties of a document or worker environment to which a policy applies.
Document directives don't fall back to the default-src
directive.
See Document directives for a complete list.