RSSAmplifier

Michael Maclean · Jan 21, 2020

CSP logging with nginx

0
Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Background The Content-Security-Policy HTTP response header has a huge number of ways in which you can limit the kinds of resources that your site is permitted to load. This can defend against XSS attacks and other kinds of content injection. It’s very powerful and, depending on how your site is built, can be fairly simple to implement by adding a header to every response that you send, either in…

Read on mgdm.net

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.