News for hackers. Stuff that matters.

A comment on Neatly Bypassing Content Security Policy. Parent comment

Re:Neatly Bypassing Content Security Policy by ChrisSD on Thursday July 12, 2018 @06:13AM (#17513315)
You'll also want the CSP `sandbox` policy on the `src` page to guard against direct linking.

[0] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...

[ Parent | on HN ]

There are no comments on this comment yet.