JOSA TechTalks: In Depth Web Application Defense using CSP

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, especially Cross-Site Scripting (XSS). These attacks are used for everything from data theft, to site defacement, to malware distribution.

In this JOSA TechTalk, we will cover Web Applications Defense in Depth using CSP, highlighting some hand-on tips on how web site administrators and web developers can control the resources the user agent is allowed to load for a given page.

Speaker:
Frida Kiriakos
Security Engineer @ Mozilla