Glossary
Content Security Policy (CSP)
A browser security standard that lets a website specify, via an HTTP header, which sources of scripts, styles, and other content are allowed to load, significantly reducing the impact of cross-site scripting attacks even if an injection flaw exists. A strict CSP is one of the most effective single mitigations against XSS.