User granty - Information Security Stack Exchange

granty

Member for 3 years
Last seen more than 1 year ago

Novosibirsk, Russia

Network profile

12 Answers

Score Activity Newest

2 votes

What is the behaviour of CSP if default-src not specified?

answered Nov 12, 2020 at 7:07

2 votes

Is it possible to bypass this csp?

answered Jun 19, 2021 at 6:19

2 votes

Example of script-src-attr that is not already handled by script-src-elem

answered Jun 19, 2021 at 6:39

1 vote

When is content security policy (CSP) not appropriate?

answered Jun 23, 2021 at 9:15

1 vote

On what types of web content is a Content-Security-Policy useful?

answered Jun 23, 2021 at 12:21

1 vote

Why only script-src unsafe-inline is reported as a high severity finding?

answered Jan 2, 2021 at 8:24

1 vote

Content Security Policy

answered Feb 3, 2021 at 4:03

0 votes

Does an effective Content Security Policy mitigate a universal cross-site scripting vulnerability?

answered Jan 25, 2021 at 15:57

0 votes

How do I let users point to their own images, yet avoid Mixed Content warnings?

answered Nov 12, 2020 at 7:57

0 votes

CSP Violation ms-appx-web://

answered Nov 12, 2020 at 8:31

0 votes

What do I risk if I use CSP header style-src-attr 'unsafe-hashes' <hash>

answered Nov 12, 2020 at 11:32

0 votes

Does CSP mitigate against client prototype pollution XSS and DOM XSS?

answered Nov 12, 2020 at 21:13