Protect Your Application with the Content Security Policy HTTP Security Header
summary
Explains how to use the Content Security Policy (CSP) HTTP header to protect a web application against attacks like cross-site scripting by restricting allowed sources for scripts, styles, images, etc. Covers practical CSP directives, configuration examples, and how to deploy and test CSP in a PHP/web environment.
AI-written summary · about
chapters (12)
- 0:00CSP introduction
- 1:06What is CSP
- 4:58Threats blocked by CSP
- 6:21XSS protection
- 9:11Strict dynamic mode
- 17:07Clickjacking protection
- 19:13Secure protocols with CSP
- 22:24CSP violation reporting
- 27:36Machka attacks
- 32:09Machka protection
- 35:42Summary and best practices
- 37:29Q&A
related talks
25mHow HTTP Content-Security-Policy can save your romantic evening
32mProtecting a Service Using CSP
16mA practical guide to implementing Content Security Policy (CSP) to secure Client-side
24mTowards a post-XSS world.
32mWhat is CSP and Why Haven't You Applied it Yet
17mContent Security Policy: The application security Swiss Army Knife
42mDeploying and managing CSP: the browser-side firewall
22mYou use Content Security Policy, don't you?