The profile is accepted so callers configure one place, but it changes
nothing: D-003 lets a user loosen limits and thresholds, never the sandbox.
A direct network path would bypass the consent, quota and revocation model
that every other mitigation depends on, so connect-src stays 'none' and
the directives match kehto's zero-network baseline exactly. The Trusted
Types directives that arm the nested-context lock are not here: kehto
appends them when the mount plan enables its lock (D-014).
The CSP every applet frame receives.
The profile is accepted so callers configure one place, but it changes nothing: D-003 lets a user loosen limits and thresholds, never the sandbox. A direct network path would bypass the consent, quota and revocation model that every other mitigation depends on, so
connect-srcstays'none'and the directives match kehto's zero-network baseline exactly. The Trusted Types directives that arm the nested-context lock are not here: kehto appends them when the mount plan enables its lock (D-014).