The power of HTTPS headers and 4 examples you did not know before Posted by loweisz on Friday October 23, 2020 @12:23PM from the lorenzweiss.de dept. https://www.lorenzweiss.de/the_power_of_http_headers_with_four_examples/ ( 1 comment | 5 points | on HN )
Content-Security-Policy is quite powerful, because it limits which origins (domains) that your page can load resources from. It can eliminate some security surprises.
https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP