What is the X-Webkit-CSP Security header in the browser ? What kind of attacks that we can mitigate from this ?
This is a deprecated HTTP header and it is being replaced by the Content Security Policy header. This will prevent prevent cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context.
All the X-* policy headers are non standard headers and following headers are also deprecated and replaced by the CSP.