public marks

PUBLIC MARKS from dzc with tag "HTTP CSP"

02 September 2014 11:00

An Introduction to Content Security Policy - HTML5 Rocks

Instead of blindly trusting everything that a server delivers, CSP defines the Content-Security-Policy HTTP header that allows you to create a whitelist of sources of trusted content, and instructs the browser to only execute or render resources from those sources. Even if an attacker can find a hole through which to inject script, the script won’t match the whitelist, and therefore won’t be executed.

dzc's TAGS related to tag "HTTP CSP"

Content Security Policy +   cross-site scripting +   csp +   html5 +   navigateur web +   securité site web +   security +   XSS attacks +