CSP Script Sources

Description: Defines allowed script sources for CSP (Pro).

How it works: builder_script_src and builder_script_mode define which domains/origins are permitted for scripts; can include self, https, specific domains, etc.

How to access / configure:

  1. WP Admin → AegisShield → Security Headers → CSP Builder.
  2. Open Script settings.
  3. Add required domains and Save Changes.

Recommended setting: Keep script sources as minimal as possible; avoid wide wildcards.