concept#Security#Architecture#Software Engineering

Content Security Policy (CSP)

Content Security Policy (CSP) is a browser-enforced mechanism to restrict allowed resource sources. CSP helps reduce cross-site scripting and other injection attacks by letting developers declare permitted sources for scripts, styles, images and frames.

Content Security Policy (CSP) is a browser-enforced security standard that lets web applications declare allowed sources for content such as scripts, styles, images and frames.

Maturity

Established

Cognitive loadMedium

360° overview

Content Security Policy (CSP)

Six perspectives place the building block in context. The numbers show where each perspective continues in the reading path.

The building block at a glance

Content Security Policy (CSP)

360°

Classification

2

Complexity: Medium
Impact area: Technical

Technical context

2

Integrations

Web servers: Nginx, Apache (header deployment)

+2

Principles & goals

1

Least privilege for resource sources

Value stream stage: Build

Use cases & scenarios

4

Use cases: 3
Scenarios: 3

Compromises

3

Risks: 3
Best practices: 3

I/O & resources

4

Inputs: 3
Outputs: 3