New answers tagged

0

The point of zero-day attacks is that they use vulnerabilities which are not known at the time they get exploited. You can thus not create a policy specifically for zero-days. But hardening the security in general also reduces the risk or at least the impact of a zero-day. Because the zero-day exploit is just the way the attacker enters the network or takes ...


1

The answer is actually a part of your question: Adobe Fonts uses inline styles and fonts as data URIs to provide our service, and making exceptions for these negates a lot of the protection provided by a CSP. As you see, Adobe does not follow best practices when it comes to security. If you would tweak your CSP in order to allow these things, you might ...


Top 50 recent answers are included