content security policy

A security method that informs the Web browser which elements being referenced by the website are valid. The content security policy (CSP) was standardized in 2012 to prevent malicious code from being executed. For example, it specifies which domains are valid for executable scripts as well as which protocols are allowed, such as only the secure HTTPS. See XSS, clickjacking and buffer overflow.

Copyright © 1981-2025 by The Computer Language Company Inc. All Rights reserved. THIS DEFINITION IS FOR PERSONAL USE ONLY. All other reproduction is strictly prohibited without permission from the publisher.

All content on this website, including dictionary, thesaurus, literature, geography, and other reference data is for informational purposes only. This information should not be considered complete, up to date, and is not intended to be used in place of a visit, consultation, or advice of a legal, medical, or any other professional.