This content originally appeared on Modern Web Development with Chrome and was authored by Paul Kinlan
- TIL 'strict-dynamic' - Mitigate cross-site scripting (XSS) with a strict Content Security Policy (CSP)
Sets[
'strict-dynamic'
](Content Security Policy Level 3to) reduce the effort of deploying a nonce- or hash-based CSP by automatically allowing the execution of scripts that are created by an already trusted script. This also unblocks the use of most third party JavaScript libraries and widgets. #
- Read CSP Is Dead, Long Live Strict CSP! - DeepSec 2016 - Speaker Deck #
- Read CSP Is Dead, Long Live CSP! On the Insecurity of Whitelists and the Future of Content Security Policy – Google Research #
- Read Why it's time to update our language about bad design patterns by Amy Hupe, content designer. - Is a very good read and something I hope we can move too more in our communication. #
This content originally appeared on Modern Web Development with Chrome and was authored by Paul Kinlan

Paul Kinlan | Sciencx (2022-07-06T00:03:14+00:00) Jul 6th, 2022. Retrieved from https://www.scien.cx/2022/07/06/jul-6th-2022/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.