Content Security Policy, an introduction

Security has always been a very important issue when it is developing a system or application, and as front end developer you definitely have to worry about this.

Originally developed by the Mozilla Foundation in 2012 the Content Security Policy (CSP) that is a safety concept that helps to avoid the cross-site scripting (XSS) and related attacks providing an HTTP header standard that allows developers to declare the authorized sources from which files can be downloaded, this files can be: JavaScript, CSS, HTML, fonts, images, audio and video files.

This article written by Mike West gives an introduction about CSP with the basic examples, a huge help for those beginning to study Content Security Policy.

An Introduction to Content Security Policy - HTML5 Rocks

More references:

Content Security Policy Reference

Content Security Policy (CSP)

Introducing Content Security Policy

CSP (Content Security Policy)