</>SkillRecallRECALL WHAT YOU KNOW
Prepare for an interviewExplore Library
Application SecurityClient-Side & Frontend Security

4 items

1

DOM-based XSS from unsafe sink assignment (innerHTML, document.write)

Code Quiz
2

Content Security Policy (CSP) directives and configuration

Quiz
3

Content Security Policy (CSP) directives and configuration

Flashcard
4

Content Security Policy (CSP) directives and configuration

Slides / Video
FlashcardIntermediate

Content Security Policy (CSP) directives and configuration

CSP is an HTTP response header that restricts which content sources a browser may load, helping mitigate XSS and injection attacks.

Question

What is a Content Security Policy and how is it configured?

Click to reveal answer