Posts tagged: #csp

Content Security Policy is useful, but it is not a substitute for output encoding, safe DOM APIs, and removing unsafe sinks.