Posts tagged: #browser-security

Content Security Policy is useful, but it is not a substitute for output encoding, safe DOM APIs, and removing unsafe sinks.