Create a policy in the dashboard

1. Log in to the Cloudflare dashboard Open external link and select your account and domain.

2. Go to Page Shield > Policies.

3. Select Create policy.

4. Enter a descriptive name for the rule in Description.

5. Under If incoming requests match, define the policy scope. You can use the Expression Builder (specifying one or more values for Field, Operator, and Value) or manually enter an expression using the Expression Editor. For more information, refer to Edit expressions in the dashboard.

6. Under Allow these directives, select the desired CSP directives for the policy by enabling one or more checkboxes.

   • To manually enter an allowed source, select Add source.
   • To refresh the displayed sources based on Page Shield’s detected resources, select Refresh suggestions. Suggestions are only available for Scripts and Connections directives.

7. Under Then take action, select the desired action:

   • Allow: Enforces the CSP directives configured in the policy, blocking any other resources from being loaded on your website, and logging any policy violations.
   • Log: Logs any policy violations without blocking any resources not covered by the policy.

8. To save and deploy your rule, select Deploy. If you are not ready to deploy your rule, select Save as Draft.