Картинка грузится, а fetch к тому же хосту — нет: как CSP тихо сломала три интеграции
Полгода назад я закрыл замечание аудита «на сайте нет CSP» — прописал Content‑Security‑Policy с белым списком хостов, проверил, что н…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Our login hung for exactly 10 seconds. Our own security headers did it.
For about a week, returning users who opened our portal watched the word "Loading…" sit on the screen for ten seconds before the login page appeared…
Your AI wrote the HTML. Now decide what that page is allowed to talk to.
Locking down who can open a page is the part everyone thinks about. You put it behind auth, you invite people by email, you set an expiry. Done. The…
What is Content Security Policy (CSP)?
One of the most important, yet often underrated, topics in frontend security is Content Security Policy (CSP) . You can think of CSP as a set of ins…