Feed
Discussions

csp

csp

#csp

0 followers·18 articles

csp

#csp·0 followers·18 articles

csp

Changelog

New steps component and improved accessibility on Hashnode's blog and docs product.

Nov 05, 2024·

new

Trending Articles

STON.fi: The Next-Gen DEX Powering TON Blockchain DeFi

Tommy williams·18 reads

AEON Pay: From Crypto Wallets to Everyday Life

Prochino·13 reads

Empowering the Decentralized Future: How Endless Merges Web2 Ease with Web3 Sovereignty

Edimavouge·12 reads

Top commenters this week

Anik Sikder

Buy Old Gmail Accounts

Buy Old Gmail Accounts

How To Buy USA Verified Chime Accounts

How To Buy USA Verified Chime Accounts

Sonu Goswami

Ariska Hidayat

Writing Challenges

#2Articles1Week Challenge

Become better at technical writing; accept Hashnode's writing challenge for four weeks.

#2Articles1Week Challenge

#WomenWhoTech

Share your story, achievements, or experiences as a woman, non-binary folk in tech or as a #WomenWhoTech ally!

#WomenWhoTech

Self Starter

Publish your first article on Hashnode and become a self starter!

Self Starter

Serial Blogger

Publish an article every day for 7 days and earn a cool serial blogger badge!

Serial Blogger

Talk of the town

Write a story that drives amazing engagement on Hashnode and become the talk of the town!

Talk of the town

Word Warrior

Write an in-depth article on your Hashnode blog that's more than 2000 words and become a word warrior!

Word Warrior

Neelesh Roy

weekly-frontend-articles.hashnode.dev·Jul 25, 2025

Jul 25, 2025

The Dark Side of Microfrontends: Isolated Apps, Shared Breaches

TL;DR RiskWhy It MattersMitigation Shared Global ScopeOne XSS = all apps exposedNo window state, strict scoping Token LeakageSession hijackUse secure cookies, avoid localStorage Inconsistent HeadersWeakest link attackEnforce CSP & headers pe...

Discuss·6 likes·8 reads

Ashish Ranjan

vaptinsights.com·May 03, 2025

May 03, 2025

How to Add a Content Security Policy (CSP) in a Next.js App: Secure Your Web Application with Ease

Table of Contents What is a Content Security Policy (CSP)? Why Use a CSP in Your Next.js App? How to Add a Content Security Policy (CSP) in a Next.js App Step 1: Define Your CSP Step 2: Update next.config.js Testing Your Content Security Poli...

How to Add a Content Security Policy (CSP) in a Next.js App: Secure Your Web Application with Ease

Umesh Pandit

umeshpandit.hashnode.dev·Mar 30, 2025

Mar 30, 2025

The Hidden Risks of Relying on a CSP for Your Azure Infrastructure

Many companies use cloud platforms to run their systems and store data. These services help reduce costs and improve flexibility. However the way your system is set up in the cloud can affect your control, access, and security. One of the most common...

The Hidden Risks of Relying on a CSP for Your Azure Infrastructure

Discuss·4 reads

Pavlo Datsiuk

pavlodatsiuk.hashnode.dev·Feb 28, 2025

Feb 28, 2025

CSP: Using Trusted Types Policies for Enhanced Web Security

Modern web applications must guard against cross-site scripting (XSS) and similar injection attacks. Trusted Types is a browser feature designed to enforce strict handling of sensitive data—such as script URLs and HTML—by only allowing values that ha...

CSP: Using Trusted Types Policies for Enhanced Web Security

Discuss·42 reads

Le Quoc Cuong

nospaceavailable.hashnode.dev·Sep 16, 2024

Sep 16, 2024

Comment trong HTML, <script> tag và một kỹ thuật CSP bypass để tấn công XSS

Ngôn ngữ HTML được đặc trưng bởi các HTML tag và các thuộc tính (attributes) của mỗi tag. Trong bài viết này, chúng ta sẽ tìm hiểu về tag <script> trong HTML và một số hành vi mà mình cho là khá thú vị khi mà HTML parser và Javascript parser cùng hoạ...

Comment trong HTML, <script> tag và một kỹ thuật CSP bypass để tấn công XSS

Discuss·65 reads

Nile Bits

nilebits.hashnode.dev·Sep 15, 2024

Sep 15, 2024

Implementing Clickjacking Defense Techniques in JavaScript

The emergence of sophisticated assaults like clickjacking has made security a primary issue in today's online world. By deceiving consumers into clicking on something that differs from what they initially see, attackers deploy a nefarious method call...

Implementing Clickjacking Defense Techniques in JavaScript

Discuss·5 reads

David Williford

David Williford

blog.davidwilliford.dev·Aug 14, 2024

Aug 14, 2024

Understanding CSPs through Hydrogen

Content Security Policy (CSP) is a crucial tool in web development that can make or break your site’s security. If you’ve spent time debugging font loading issues or mysterious errors while working with 3rd party imports, you’ve likely bumped into CS...

Understanding CSPs through Hydrogen

Discuss·48 reads

Web Development

Sumir Broota

breachforce.net·Jul 08, 2024

Jul 08, 2024

Implementing a Secure Content Security Policy (CSP)

Skip to TLDR Introduction Content Security Policy (CSP) provides mechanisms for websites to restrict content that browsers will be allowed to load. It is the holy grail for client side web application security. A strong policy can provide monumental ...

Implementing a Secure Content Security Policy (CSP)

Discuss·102 reads

Chetanya Tomar

chetanya-snaps.hashnode.dev·Jul 01, 2024

Jul 01, 2024

👮 What The Hell Is Csp?

So, you're planning to switch to a Senior Frontend Developer role. Aiming for that 2000% salary hike at a startup or FAANG, huh? If you don’t know this, I think you should re-consider and pull the brakes.Today, I'll show you how to prevent your app...

👮 What The Hell Is Csp?

Discuss·10 likes·24 reads

Amit Paunikar

amitpaunikar.hashnode.dev·Jun 17, 2024

Jun 17, 2024

Digging deeper into FIPS and FedRAMP Compliances

In an earlier article, we listed some of the Compliance and Regulatory standards required by Public Sector companies in the U.S. Here we dig deeper into two of these regulations - FIPS and FedRAMP. Federal Information Processing Standards (FIPS) FIPS...

Discuss·27 reads