Update form-action

wbamberg · Sep 18, 2024 · 4fa3e40 · 4fa3e40
1 parent c222932
commit 4fa3e40
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/files/en-us/web/http/headers/content-security-policy/form-action/index.md b/files/en-us/web/http/headers/content-security-policy/form-action/index.md
@@ -41,7 +41,11 @@ This directive may have either:
 - the single keyword value `'none'`, meaning that no form submissions may be made
 - a list of _source expression_ values, meaning that form submissions may be made to URLs that match any of the given source expressions.
 
-The syntax for each source expression is given in [CSP Source Values](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/Sources).
+The syntax for each source expression is given in [CSP Source Values](/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/Sources). However, only the following subset of those values apply to `form-action`:
+
+- `<host-source>`
+- `<scheme-source>`
+- the keyword value `'self'`.
 
 ## Examples