When should one include a Content Security Policy?

Fri, 28 Sep 2018 19:15:24 +0000

Content Security Policy (CSP) is promoted as a way to mitigate content injection vulnerabilities including cross-site scripting. When making a website when should a CSP header be included and when is it of no use?

I read https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

which explained what CSP is, but I am still confused as to when to use it.

Ask Ghassem - Recent questions tagged csp

When should one include a Content Security Policy?