Julia Evans @b0rk@jvns.ca
Public

if your company sets a `Content-Security-Policy` header: who's in charge of deciding what it should be? (someone in security? someone who works on the frontend? other? multiple people?)

developer.mozilla.org/en-US/do

The MDN Web Docs logo, featuring a blue accent color, displayed on a solid black background.

Content Security Policy (CSP) - HTTP | MDN

Content Security Policy (CSP) is a feature that helps to prevent or minimize the risk of certain types of security threats. It consists of a series of instructions from a website to a browser, which instruct the browser to place restrictions on the things that the code comprising the site is allowed to do.

developer.mozilla.org · MDN Web Docs

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://social.jvns.ca/users/b0rk/statuses/115583758416386330 on your instance and quote it. (Note that quoting is not supported in Mastodon.)