Mitigate cross-site scripting (XSS) with a strict Content Security Policy (CSP)
How to deploy a CSP based on script nonces or hashes as a defense-in-depth against cross-site scripting.
Lukas Weichselbaum
Our latest news, updates, and stories by Lukas Weichselbaum.
Protect your resources from web attacks with Fetch Metadata
Prevent CSRF, XSSI, and cross-origin information leaks.