What is Content Security Policy?
Content Security Policy is an HTTP mechanism that tells browsers which sources may supply scripts, images and other resources.
Browser restrictions
The server sends CSP directives such as script-src. Nonces or hashes allow selected inline scripts. Report-only rollout helps discover breakage before enforcement.
Uses and limitations
It can reduce some XSS impact but does not replace safe coding. Overly broad policies weaken protection; overly narrow ones break legitimate features.
Related topics
What is encryption?What is GraphQL?What is CI/CD?What is a webhook?What is an operating system?What is end-to-end encryption?What is an algorithm?What is DNSSEC?What is WebSocket?What is 5G?How are microchips manufactured?What is QUIC?What is HTTPS?What is WebAssembly?What is a service worker?What is a virtual machine?What is Wi-Fi?What is data backup?What is responsive web design?What is TCP?What is two-factor authentication?What is Kubernetes?What is a message queue?What is a database transaction?What is model fine-tuning?What is RAM?What is retrieval-augmented generation?What is software supply chain security?What is the Internet of Things (IoT)?What is a database index?What is a CDN?What is an API?What is a software container?What is computer vision?What is a vector database?HEC codeWhat is a lithium-ion battery?What is a data warehouse?What is a firewall?What is a web browser?What is OAuth 2.0?What are USB and USB-C?What is NFC?What is HTTP/3?What is edge computing?What is CORS?What is a quantum computer?What are a GPU and a graphics card?What is a VPN?What is load balancing?