Don't have an account? Sign up
If you're already signed up, please sign in
Content Security Policy (CSP) — a browser-enforced policy that restricts which sources may supply scripts, styles, frames, and other resources to a page.
A browser applies the policy only after receiving a valid HTTP header or cookie attribute. Security headers complement secure code and do not remove a server-side vulnerability; an overly restrictive policy can break legitimate site behavior.
Content Security Policy (CSP) — a browser-enforced policy that restricts which sources may supply scripts, styles, frames, and other resources to a page.
The policy restricts a specific browser behavior, such as resource loading, page embedding, referrer disclosure, feature access, or cross-site cookie transmission.
Introduce the policy gradually, validate syntax and actual response headers, test critical user flows, and review browser-console messages or violation reports.
