Web Security · Junior · Question 65 of 75

What does the `default-src` directive do?

1It sets which page opens by default
✓Correct answer: It's the fallback for resource types that don't have their own directive, such as img-src or font-src
3It defines the default language of the page

Explanation

A policy often starts with default-src 'self' and then opens specific types, for example img-src 'self' https://cdn.example.com.

Further reading

MDN: Content Security Policy ↗

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.