BLT Issue - Content Security Policy (CSP) Header Not Set\u000D\u000A\u000D\u000A\u000D\u000AContent Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.

Content Security Policy (CSP) Header Not Set\u000D\u000A\u000D\u000A\u000D\u000AContent Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.

Tweet GitHub Link

To comment, please sign in.

jmillz085

Total Points = 10

Reported on swcs.be

Issues Reported: 3

Browser Version: 78.0

Operating System Linux

Added On

Nov. 8, 2021, 1:21 a.m.

Bug Type

Security

Submitted

Independently

OS Version:

Unknown