Security
Chapter 66: Content Security Policy (CSP)
Mastering Defense-in-Depth, CSP Level 3 Directives, Cryptographic Nonces, Hashes, Strict CSP, and Real-Time Violation Telemetry
-
01
What is Content Security Policy (CSP)?
-
02
Production CSP Recipes for SPAs, Static Sites & APIs
-
03
CSP Delivery Methods — HTTP Header vs meta Tag
-
04
Core Source Directives
-
05
CSP Source Values & Keywords
-
06
Cryptographic Nonces in CSP
-
07
Cryptographic Hashes in Content Security Policy
-
08
Modern Strict CSP Architecture with 'strict-dynamic'
-
09
Testing with Content-Security-Policy-Report-Only
-
10
Real-Time CSP Violation Handling & DOM Listeners