xss-prevention

CSP Bypass Techniques and Prevention: Beyond the Basics

Content Security Policy is the strongest browser-side defense against XSS. But most CSP deployments are bypassable. Here is why, and how to fix it.