|string|null */ public $defaultSrc = [ 'self', 'www.google.com', ]; /** * Lists allowed scripts' URLs. * * @var list|string */ public $scriptSrc = [ 'self', 'unsafe-inline', 'unsafe-eval', 'www.google.com www.gstatic.com' ]; /** * Specifies valid sources for JavaScript