Posts tagged: #defense

Content Security Policy is useful, but it is not a substitute for output encoding, safe DOM APIs, and removing unsafe sinks.