granty's user avatar
granty's user avatar
granty's user avatar
granty
  • Member for 3 years, 3 months
  • Last seen more than 1 year ago
  • Novosibirsk, Russia
2 votes

What is the behaviour of CSP if default-src not specified?

2 votes

Is it possible to bypass this csp?

2 votes

Example of script-src-attr that is not already handled by script-src-elem

1 vote

When is content security policy (CSP) not appropriate?

1 vote

On what types of web content is a Content-Security-Policy useful?

1 vote

Why only script-src unsafe-inline is reported as a high severity finding?

1 vote

Content Security Policy

0 votes

Does an effective Content Security Policy mitigate a universal cross-site scripting vulnerability?

0 votes

How do I let users point to their own images, yet avoid Mixed Content warnings?

0 votes

CSP Violation ms-appx-web://

0 votes

What do I risk if I use CSP header style-src-attr 'unsafe-hashes' <hash>

0 votes

Does CSP mitigate against client prototype pollution XSS and DOM XSS?