CSP

Content Security Policy，内容安全策略

CSP 用于检测和缓解某些类型的网站攻击，比如跨站点脚本、点击劫持和数据注入。是基于 HTTP 的 Content-Security-Policy header 实现的。

1. https://en.wikipedia.org/wiki/Content_Security_Policy

2. https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

3. https://developer.mozilla.org/en-US/docs/Glossary/Cross-site_scripting

4. https://developer.mozilla.org/en-US/docs/Glossary/Clickjacking

5. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy