Security
youtube
This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper
Attend the next NDC conference near you:
Subscribe to our YouTube channel and learn every day: @NDC
Follow our Social Media!
#application #security #devops #programming
The response header Content Security Policy is trending. It has become a PCI DSS requirement. Penetration testers and security savvy clients expect it more and more. This simple response header unlocks great security features in the browser. But if you get it wrong it may kill your site!
This talk will help you navigate safely through all the directives, levels, enforcement modes, deprecations, fallbacks, and varying browser implementation and support. You'll learn how to build a policy efficiently, the considerations you need to make along the way, and how you handle violation reports from users.
Halvor Sakshaug is one of the top answerers for Content Security Policy questions on Stack Overflow.
|
2025/03/26
youtube
