|string|null */ public string | array | null $defaultSrc = null; /** * Lists allowed scripts' URLs. * * @var list|string */ public string | array $scriptSrc = 'self'; /** * Specifies valid sources for JavaScript