org.nuxeo.ecm.platform.web.common.requestcontroller.service.RequestControllerService.defaultContrib /nuxeo/nxfile/.*\\?.*changeToken=.+ /nuxeo/nxfile/.* /nuxeo/nxbigfile/.* /nuxeo/nxbigzipfile/.* /nuxeo/img.* /nuxeo/icons.* /nuxeo/js.* /nuxeo/scripts.* /nuxeo/waitdialog.* /nuxeo/.*/@(blob|preview|rendition).*\\?.*changeToken=.+ /nuxeo/.*/@(blob|preview|rendition).* /nuxeo/nxadmin/.*

IE=10; IE=11

no-cache

nosniff

1; mode=block

SAMEORIGIN

strict-origin-when-cross-origin

img-src data: blob: *; default-src blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: *; style-src 'unsafe-inline' *; font-src data: *