Content-Security-Policy: An Introduction

[@codedynamics1]

I found this video a while ago and saved it. This fundemental for websites and web applications to mitigate XSS attacks. I came across a 'trusted scripts assignment' error in the console and after a ton of research i've started implementing a CSP header (you can also use the meta tag to set a CSP) but i still needed more info so i came back here. Thanks for taking time to make this video Abhay i can see that you've gone through some lengths to hide personal info before uploading the video so its really appreciated and its going to help alot.

[@ramanjha2277]

This is one of the best videos I have ever seen on any topic.

[@abhaybhargav]

Thank you

[@goodthoughtwelike]

Abhay, this is one of the best presentations. This whole video is able to maintain the curiosity. Thanks a lot.

[@abhaybhargav]

Thank you very much for your compliments :)

[@DhruvduttJadhav]

Very nicely covered. Keep making more of such deep dives on niche topics.

[@AlexanderWunschik]

Thanks for this excellent deep-dive into CSP!

[@ellaiyarasankalidass5267]

Great content, learnt valuable lesson from you as a web developer.

[@aravindgop1]

It was a very professional presentation.. I especially liked the courtesy links that you have posted towards the end ... 👍🏻

[@abhaybhargav]

Thank you!

[@sandeepdantuluri3414]

Great n unique way of explanation sir. Waiting to learn more concepts 👌👌

[@abhaybhargav]

Thank you!

[@olenaback1212]

This is a very perspicuous explanation/ intro into CSP! Thanks!

[@abhaybhargav]

Thank you!

[@domaincontroller]

07:37 set by the (Application) server 08:19 my web server would indicate to the browser via an HTTP header, from the same origin server

[@shashankbhuvanala2952]

Pls clarify, How do we mange this CSP in SPA(single page applications)....In my case it is React JS

[@ajayKumar-yc4mf]

Very Well explained, the details you go into are very helpful

[@hitnahsin]

Thanks for the information , explanation and your time !!!

[@abhaybhargav]

Thanks :)

[@kobicohen3205]

great explanation... good luck Abhay

[@shikharjoshi267]

This video is gold.

[@abhaybhargav]

Thank you :)

[@shashankbhuvanala2952]

Nice explanation.. I see very less videos in your video channel. Why ?

[@samuelbotini8547]

wow bro it's an awesome explanation, tanks for this, and your english pronunciation it's amazing

[@abhaybhargav]

Thank you Samuel :)

[@ritiksahni542]

A great presentation! Loved it.

[@abhaybhargav]

Thank you

[@GaneshPrabhuRajendran]

This is best video for learning CSP

[@dougthefiddler]

Awesome information - really clear - thanks!

[@abhaybhargav]

Thank you!

You explained it very well. Concept is clear to me. But how do I get my javascript loaded without errors. I have very little knowledge of Java and have played with a bit. I found which files causing the errors but how do I correct this. Where do I inject the nonce or hash code in my files or remove the errors in my javascrips?

[@subhadharshini9303]

presentation was very neat and good. Very much helpful

[@abhaybhargav]

Thank you!

[@AmarSingh-uw1db]

Awsome, explanation sir great 👍

[@abhaybhargav]

Thank you!

[@johnybandlamudi1838]

Thank you for the detailed explanation.

[@abhaybhargav]

Thank you

[@sundargeek4915]

Dude, This is good

[@abhaybhargav]

Thanks mate

[@_justinprojects]

very thorough, thanks for the demo!

[@GopalSinghR1]

Excellent Explanation

[@AmanMankar]

Hey Ashish, quick question. if I have 'connect-src *' but have explicitly limited script-src and all other derivatives to a particular domain, how much of a threat is it?

[@robl39]

I finally get it. Thanks!

[@abhaybhargav]

Glad you found it useful

[@TheBikerr]

Very informative Video, One request please share link to the source code of the application...

[@alucardjp1]

Great video

[@abhaybhargav]

Thank you!

[@venkateswarareddy5137]

Nice Presentation!

[@abhaybhargav]

Thank you!

[@antonyshaji2008]

Much appreciated. thanks.

[@jeganofsathyabama]

Willing to talk to you around some appsec problems that i want to solve for my company. Kindly accept my invite on LinkedIn