Advanced CSP: nonces, strict-dynamic and Trusted Types
Why unsafe-inline isn't enough, how CSP nonces and hashes work for a static site, what strict-dynamic is, and what Trusted Types is for.
← Back to Tags
Posts tagged "security"
5posts
WebAuthn and Passkeys: how passwordless authentication really works
How the WebAuthn protocol behind passkeys works — public keys, attestation, a practical example — and why they're not just a more convenient alternative to passwords.
Node.js - January 2026 Security Releases
Security updates for Node.js 25.x, 24.x, 22.x and 20.x: 3 high-severity vulnerabilities, 4 medium and 1 low. Here is what they fix and how to update.
Google Chrome won't connect to the local network on macOS
Having trouble getting Google Chrome to connect to local servers, e.g. .local addresses? Here is how to fix it
CSP: how Content Security Policy works
Content Security Policy, or CSP, is a set of rules that tell the browser how to behave when loading the content of our HTML page.