Content security policy helps prevent cross-site scripting attacks (XSS) and threats. It acts as an extra foolproof layer enabling automated detection of cyber security attacks and help mitigate them. CSP is a backward compatible solution – typically browsers and servers should have content security policies in place – however, it works even when browsers that do not support CSP work with servers that are CSP-compliant and equipped and the other way around too
Topics