youtube
This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper
Attend the next NDC conference near you:
Subscribe to our YouTube channel and learn every day:
/ @NDC
Follow our Social Media!
#security #javascript #web
Content Security Policy, or CSP in short, has been around for more than a decade. We're all familiar with CSP in one way or another. Maybe you suffered implementing it, or were scolded for not having it by a pentest report, or you spent hours figuring out whether 'unsafe-inline' is actually unsafe or not.
In a nutshell, CSP is messy and complicated. But it doesn't have to be.
This session will be instrumental in helping you unravel the mysteries behind CSP. Concretely, you will learn why most CSP policies are highly ineffective and likely insecure. You will learn how to configure CSP the right way and how to build a backwards compatible policy. You will also learn about three ways of deploying CSP in single page applications. At the end of this session, you will know how to deal with CSP and you will have actionable guidelines to leverage CSP for security.
|
2026/10/14
youtube
