Web Security · Middle · Question 14 of 75

What is a hash-based CSP source like `'sha256-...'`?

1It hashes the page's cookies
✓Correct answer: It allows one specific inline script whose content matches the hash
3It allows any script from a domain with that hash in its name

Explanation

Hashes suit static pages where the inline code doesn't change. Any change to the script means the hash must be updated.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.