Content Security Policy (CSP)Content Security Policy (CSP) helps to mitigate certain security threats, including cross-site scripting (XSS) and clickjacking attacks. It consists of a set of directives from a website to a browser, which instruct the browser to restrict the things that the site is allowed to do.securitySecuritywidely2016-08-022019-02-02https://w3c.github.io/webappsec-csp/contentsecuritypolicycontentsecuritypolicy2https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEventapi.Document.securitypolicyviolation_eventapi.Element.securitypolicyviolation_eventapi.HTMLElement.nonceapi.HTMLIFrameElement.cspapi.SecurityPolicyViolationEventapi.SecurityPolicyViolationEvent.SecurityPolicyViolationEventapi.SecurityPolicyViolationEvent.blockedURIapi.SecurityPolicyViolationEvent.columnNumberapi.SecurityPolicyViolationEvent.dispositionapi.SecurityPolicyViolationEvent.documentURIapi.SecurityPolicyViolationEvent.effectiveDirectiveapi.SecurityPolicyViolationEvent.lineNumberapi.SecurityPolicyViolationEvent.originalPolicyapi.SecurityPolicyViolationEvent.referrerapi.SecurityPolicyViolationEvent.sampleapi.SecurityPolicyViolationEvent.sourceFileapi.SecurityPolicyViolationEvent.statusCodeapi.SecurityPolicyViolationEvent.violatedDirectiveapi.SecurityPolicyViolationEvent.worker_supportapi.WorkerGlobalScope.securitypolicyviolation_eventhtml.elements.iframe.csphtml.elements.meta.http-equiv.content-security-policyhtml.global_attributes.noncehttp.headers.Content-Security-Policyhttp.headers.Content-Security-Policy-Report-Onlyhttp.headers.Content-Security-Policy.base-urihttp.headers.Content-Security-Policy.child-srchttp.headers.Content-Security-Policy.connect-srchttp.headers.Content-Security-Policy.default-srchttp.headers.Content-Security-Policy.font-srchttp.headers.Content-Security-Policy.form-actionhttp.headers.Content-Security-Policy.frame-ancestorshttp.headers.Content-Security-Policy.frame-srchttp.headers.Content-Security-Policy.img-srchttp.headers.Content-Security-Policy.manifest-srchttp.headers.Content-Security-Policy.media-srchttp.headers.Content-Security-Policy.meta-element-supporthttp.headers.Content-Security-Policy.object-srchttp.headers.Content-Security-Policy.report-samplehttp.headers.Content-Security-Policy.sandboxhttp.headers.Content-Security-Policy.script-srchttp.headers.Content-Security-Policy.script-src-attrhttp.headers.Content-Security-Policy.script-src-elemhttp.headers.Content-Security-Policy.script-src.external_scriptshttp.headers.Content-Security-Policy.script-src.wasm-unsafe-evalhttp.headers.Content-Security-Policy.strict-dynamichttp.headers.Content-Security-Policy.style-srchttp.headers.Content-Security-Policy.style-src-attrhttp.headers.Content-Security-Policy.style-src-elemhttp.headers.Content-Security-Policy.unsafe-hasheshttp.headers.Content-Security-Policy.worker-srchttp.headers.Content-Security-Policy.worker_supporthttps://nowyoucanuse.com/features--csp.html