The csp-header-generator-class Element

since 10.3.0 Syntax:

<csp-header-generator-class>a_class_name</csp-header-generator-class>

[Default: org.zkoss.zk.ui.http.CspProviderImpl]

<system-config>
    <csp-enabled>true</csp-enabled>
    <csp-header-generator-class>org.zkoss.zk.ui.http.CspProviderImpl</csp-header-generator-class>
</system-config>

Requires csp-enabled and a custom class implementing org.zkoss.zk.ui.util.CspProvider to override the default CSP header generation.

See full documentation entry.