Content Security Policy Explained

[@kostas_x]

Quick, concise and right to the point (and without running over us like a Fireship road roller)! Great work Tejas.

[@tejask]

Hey thanks a lot Kostas!!!

[@tiktokspicyfyp9195]

subscribed bro I love the way you explain

[@tejask]

Appreciate it

[@purduetom90]

very informative!

[@jiyelaljaiswal7458]

explained in best possible way

[@tejask]

Thanks!!

[@rajeshreddy7569]

Hi Tejas, Thank you for explaining the content-security-policy. What are your thoughts on adding the content-security-policy header to web-servers like nginx, apache tomcat etc,. directly?

[@tejask]

It depends on the surface of the servers and what they serve. Generally, it's a good idea if the scope is isolated IMO.

[@roamandlift]

great explanation

[@tejask]

Glad it was helpful!

[@JoeyPauga]

Great explanation 👍👍

[@tejask]

Glad you liked it

[@pulkitsharma6643]

is it good to block csp reports in ublock origin's settings ? or should it leave in off

[@onecuriousmuggle]

That’s a precise explanation, although would have been better if there was an explanation provided for nonce and hashes as well. As with just ‘self’ and other domain we cant really mitigate xss anymore. Just a feedback! Good video though :)

[@nicolaskevin4046]

thank you

[@rudiziebart9686]

The scripts on the screen are much too small. No one can read them.

[@GuillermoFedericoMorton]

zoom in