Change the Content-Security-Policy header that is returned on all Bitbucket responses between "Content-Security-Policy" and "Content-Security-Policy-Report-Only".

Forge and OAuth2 apps cannot access this REST resource.

Request

Request bodyapplication/json

strictness

string

Responses

Setting updated

PUT/csp/latest/settings

curl

Node.js

Java

Python

PHP

curl --request PUT \
  --url 'http://{baseurl}/rest/csp/latest/settings' \
  --header 'Content-Type: application/json' \
  --data '{
  "strictness": "STRICT"
}'