Content-Security Policy (CSP)

[LeaVerou]

An added layer of security that helps to detect and mitigate XSS and other attacks.

Code sample

Content-Security-Policy: default-src 'self'

MDN URL:

https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

Specification URL:

https://www.w3.org/TR/CSP3/

Any other links?

Can I Use

How stable is this feature?

Stable (Widely supported for several years)

Type of feature

HTTP

What focus area does this feature fall under?

Security & Privacy

Details

No response