Website hardening. Content Security Policy
#1
https://content-security-policy.com

Just one line but a massive effectiveness. Here i show you an example how it looks like.

Code:
<meta http-equiv="content-security-policy" content="default-src 'self'; script-src 'none'; object-src 'none'; media-src 'none'; font-src 'none'; connect-src 'none'; base-uri 'none'">

[Image: 25db794a67210eb9c084df07da2b1c9f4f02fdbd...b97bec.png]
Reply
#2
Thanks for the share!

Even better, if you have access to the webserver you can add these headers directly in the http requests:
https://webdock.io/en/docs/how-guides/ho...and-apache
Reply
#3
(01-03-2021, 02:42 AM)Insider Wrote: Thanks for the share!

Thank you! Your Link is great.
Reply