CSP Developer Field Guide

By

Foundeo Inc.

For developers that need to get up to speed on CSP, or Content-Security-Policy quickly. This e-book is concise, and to the point.  Includes a 40 page PDF and ePUB file.

Table of Contents

1. Introduction to CSP
2. Understanding HTTP Headers
3. Getting Started with CSP
4. Source Lists
5. Controlling JavaScript with script-src
6. Controlling CSS with style-src
7. Loading images with img-src
8. Restricting script initiated HTTP requests with connect-src
9. Fetch Directives and the default-src
10. Navigation Directives
11. Strict CSP using strict-dynamic
12. Document Directives
13. Reporting
14. Appendix (Browser Support Reference)