Content Security Policy - Concept, Strategies & Pitfalls
Content Security Policy (CSP) is a web security standard introduced to prevent cross-site scripting and other code injection attacks resulting from malicious content being executed in the trusted web page context. TYPO3 v12 comes with integrated CSP support, policy modeling, and violation report handling.
This talk presents the basic concepts, common pitfalls, and potential solutions for using a secure and strict Content Security Policy.