Hello Edmond, It seems 'base-uri' directive [1] is missing is "enum CSPDirective" Is it on purpose?
One of our users check current rules using some validator [2] [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/base-uri [2] https://issues.apache.org/jira/browse/OPENMEETINGS-2370?focusedCommentId=17114589&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17114589 -- Best regards, Maxim