|string|null */ public $defaultSrc; /** * Lists allowed scripts' URLs. * * @var list|string */ public $scriptSrc = 'self'; /** * Specifies valid sources for JavaScript