A Content-Security-Policy directive compatible with CSP Level 1 and CSP Level 2.
The list of sources that may be loaded for the specified policy.