Advanced CSP: nonces, strict-dynamic and Trusted Types
Why unsafe-inline isn't enough, how CSP nonces and hashes work for a static site, what strict-dynamic is, and what Trusted Types is for.
2posts
Why unsafe-inline isn't enough, how CSP nonces and hashes work for a static site, what strict-dynamic is, and what Trusted Types is for.
Content Security Policy, or CSP, is a set of rules that tell the browser how to behave when loading the content of our HTML page.