New answers tagged


Content-Security-Policy is an actual instruction to the browser of how a site should behave, specifically where potentially dangerous content can be loaded from and if potentially dangerous actions like inline script are allowed on this site. A WAF is not a replacement for a strict Content-Security-Policy. A WAF will only apply heuristics to request and ...

Top 50 recent answers are included