Gecko [ tradesense.co.ke ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
Boot	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
App.php	15.59 KB	-rw-r--r--
Autoload.php	2.73 KB	-rw-r--r--
CURLRequest.php	569 B	-rw-r--r--
Cache.php	6.13 KB	-rw-r--r--
Constants.php	3.5 KB	-rw-r--r--
ContentSecurityPolicy.php	3.82 KB	-rw-r--r--
Cookie.php	3.55 KB	-rw-r--r--
Database.php	2.2 KB	-rw-r--r--
DocTypes.php	2.71 KB	-rw-r--r--
Email.php	2.53 KB	-rw-r--r--
Encryption.php	1.94 KB	-rw-r--r--
Events.php	1.56 KB	-rw-r--r--
Exceptions.php	1.8 KB	-rw-r--r--
Feature.php	819 B	-rw-r--r--
Filters.php	1.5 KB	-rw-r--r--
ForeignCharacters.php	152 B	-rw-r--r--
Format.php	2.5 KB	-rw-r--r--
Generators.php	1.87 KB	-rw-r--r--
Honeypot.php	730 B	-rw-r--r--
Images.php	740 B	-rw-r--r--
Kint.php	1.52 KB	-rw-r--r--
Logger.php	5.74 KB	-rw-r--r--
Migrations.php	1.65 KB	-rw-r--r--
Mimes.php	15.48 KB	-rw-r--r--
Modules.php	1.56 KB	-rw-r--r--
Pager.php	1.17 KB	-rw-r--r--
Paths.php	2.75 KB	-rw-r--r--
Publisher.php	803 B	-rw-r--r--
Routes.php	2.19 KB	-rw-r--r--
Security.php	3.3 KB	-rw-r--r--
Services.php	921 B	-rw-r--r--
Toolbar.php	3.41 KB	-rw-r--r--
UserAgents.php	9.56 KB	-rw-r--r--
Validation.php	1.04 KB	-rw-r--r--
View.php	1.31 KB	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--

Code Editor : ContentSecurityPolicy.php

<?php

namespace Config;

use CodeIgniter\Config\BaseConfig;

/**
 * Stores the default settings for the ContentSecurityPolicy, if you
 * choose to use it. The values here will be read in and set as defaults
 * for the site. If needed, they can be overridden on a page-by-page basis.
 *
 * Suggested reference for explanations:
 *
 * @see https://www.html5rocks.com/en/tutorials/security/content-security-policy/
 */
class ContentSecurityPolicy extends BaseConfig
{
    //-------------------------------------------------------------------------
    // Broadbrush CSP management
    //-------------------------------------------------------------------------

/**
     * Default CSP report context
     *
     * @var bool
     */
    public $reportOnly = false;

/**
     * Specifies a URL where a browser will send reports
     * when a content security policy is violated.
     *
     * @var string|null
     */
    public $reportURI;

/**
     * Instructs user agents to rewrite URL schemes, changing
     * HTTP to HTTPS. This directive is for websites with
     * large numbers of old URLs that need to be rewritten.
     *
     * @var bool
     */
    public $upgradeInsecureRequests = false;

//-------------------------------------------------------------------------
    // Sources allowed
    // Note: once you set a policy to 'none', it cannot be further restricted
    //-------------------------------------------------------------------------

/**
     * Will default to self if not overridden
     *
     * @var string|string[]|null
     */
    public $defaultSrc;

/**
     * Lists allowed scripts' URLs.
     *
     * @var string|string[]
     */
    public $scriptSrc = 'self';

/**
     * Lists allowed stylesheets' URLs.
     *
     * @var string|string[]
     */
    public $styleSrc = 'self';

/**
     * Defines the origins from which images can be loaded.
     *
     * @var string|string[]
     */
    public $imageSrc = 'self';

/**
     * Restricts the URLs that can appear in a page's `<base>` element.
     *
     * Will default to self if not overridden
     *
     * @var string|string[]|null
     */
    public $baseURI;

/**
     * Lists the URLs for workers and embedded frame contents
     *
     * @var string|string[]
     */
    public $childSrc = 'self';

/**
     * Limits the origins that you can connect to (via XHR,
     * WebSockets, and EventSource).
     *
     * @var string|string[]
     */
    public $connectSrc = 'self';

/**
     * Specifies the origins that can serve web fonts.
     *
     * @var string|string[]
     */
    public $fontSrc;

/**
     * Lists valid endpoints for submission from `<form>` tags.
     *
     * @var string|string[]
     */
    public $formAction = 'self';

/**
     * Specifies the sources that can embed the current page.
     * This directive applies to `<frame>`, `<iframe>`, `<embed>`,
     * and `<applet>` tags. This directive can't be used in
     * `<meta>` tags and applies only to non-HTML resources.
     *
     * @var string|string[]|null
     */
    public $frameAncestors;

/**
     * The frame-src directive restricts the URLs which may
     * be loaded into nested browsing contexts.
     *
     * @var array|string|null
     */
    public $frameSrc;

/**
     * Restricts the origins allowed to deliver video and audio.
     *
     * @var string|string[]|null
     */
    public $mediaSrc;

/**
     * Allows control over Flash and other plugins.
     *
     * @var string|string[]
     */
    public $objectSrc = 'self';

/**
     * @var string|string[]|null
     */
    public $manifestSrc;

/**
     * Limits the kinds of plugins a page may invoke.
     *
     * @var string|string[]|null
     */
    public $pluginTypes;

/**
     * List of actions allowed.
     *
     * @var string|string[]|null
     */
    public $sandbox;
}

${this.title}

Code Editor : ContentSecurityPolicy.php