localghost.dev
Defending yourself against cross-site scripting attacks with Content-Security-Policy - localghost
A guide to cross-site scripting (XSS) attacks and the HTTP Content-Security-Policy header, what it does, how to use it, and how it protects us.