You Use Content Security Policy, Don't You?

Discover how to fortify your website against common attacks in this 22-minute conference talk from JSConf Budapest 2017. Explore Content Security Policy (CSP), a powerful security mechanism that can make your site impervious to XSS and other vulnerabilities. Learn what CSP is, how it functions, and how to implement it effectively through real-life examples and live coding demonstrations. Delve into topics such as the Sony hack, frontend security, the MySpace virus incident, cross-site scripting, HTTP-only cookies, and the potential drawbacks of CSP. Gain valuable insights to enhance your web application's security posture and protect against prevalent threats in the digital landscape.