I have a CSP policy implemented, currently without any , so it applies for the whole host myhost.com.

Now I have a path myhost.com/somepath which I want to exclude from the CSP policy. I understand, I cannot explicitly exclude a path in the directive. I can only specify a path, to which the policy applies.

So, is it at all possible to

• enable a policy for myhost.com and
• disable the same policy for myhost.com/somepath

And if so, how?

Thanks,
Lars