CSP (3)
CSP (3)
( = Content Security Policy, "sisu turvapoliitika")
olemus
brauseriturbe standard:
algversioon 2004, W3C standard alates 2012
=
a computer security standard that provides an added layer of protection against client-side attacks that rely on executing malicious content in the context of a web page
ülevaateid
https://en.wikipedia.org/wiki/Content_Security_Policy
https://www.netsparker.com/blog/web-security/content-security-policy/
https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html
teostusnäiteid
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox
https://content-security-policy.com/
veebisait
https://www.w3.org/TR/CSP3/