-
If you develop for the web, you should be aware of cross-site scripting (XSS) attacks and how the Content-Security-Policy header can help mitigate them. It can be pretty confusing, but I've written a guide! localghost.dev/2020/05/defending-yourself-against-cross-site-scripting-attacks-with-content-security-policy/