Remove add-ons-extensions-and-csp-violations-playing-nice-with-content-security-policies
article thumbnail

Add-ons, Extensions and CSP Violations: Playing Nice with Content Security Policies

Troy Hunt

A nice, slick, clean set of violation reports from the content security policy (CSP) I run on Have I Been Pwned (HIBP). For example, on HIBP I declare that scripts can be loaded from the same site and also from Cloudflare's CDN because I pull jQuery from their public library.