Cybersecurity
Content Security Policy (CSP)
An HTTP response header restricting which domains can serve scripts, styles, and resources to a web page. CSP is a primary defense against XSS and Magecart-style payment page attacks, and a widely accepted method for satisfying PCI DSS 4.0.1 Requirement 6.4.3.
From the library
The full analysis on Content Security Policy (CSP).
The article is where the term meets the practitioner. Read how this concept actually shows up in audit, in remediation, and in the boardroom.
Read the analysis →