OptionalallowWhether to allow images from any HTTPS origin (https:) in img-src.
When false (the default), images are restricted to the webview's
cspSource, data: URIs, and the explicit imgSrc list.
OptionalallowWhether to allow 'unsafe-inline' in style-src.
Browsers treat 'unsafe-inline' as overriding any nonce in the same
directive, so when this is true the nonce in style-src is effectively
ignored. When false (the default) and a nonce is provided, the
nonce is used for nonced inline styles instead.
OptionalconnectAdditional connect sources (for fetch/XHR/WebSocket).
OptionalfontAdditional font sources.
OptionalimgAdditional image sources.
OptionalmediaAdditional media sources (for <video>/<audio>).
OptionalnonceNonce for inline scripts/styles.
OptionalscriptAdditional trusted script-source expressions, inserted verbatim.
When a nonce is supplied these are the only other sources allowed to
run scripts: the webview's own cspSource is deliberately left out, since
including it would let any script under localResourceRoots run without
the nonce. See generateCSP.
OptionalstyleAdditional trusted style-source expressions, inserted verbatim.
OptionalworkerAdditional worker sources (for Web Workers / WASM offloading).
Options for CSP generation.