Browser & Web Performance · Junior · Question 63 of 75

What is Content Security Policy (CSP)?

1An HTTPS certificate setting
✓Correct answer: A response header that tells the browser which sources of scripts, styles and other content are allowed
3A JavaScript library that sanitizes HTML

Explanation

CSP is a second line of defense: even if markup is injected, scripts not allowed by the policy won't run.

Further reading

MDN: Content Security Policy ↗

Test yourself

Take the Browser & Web Performance · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.