Introducing support for Content Security Policy Level 2 We are happy to introduce support for Content Security Policy Level 2 (CSP2) in Microsoft Edge, another step in our ongoing commitment to make Microsoft Edge the safest and most secure browser for our customers. CSP2, when used correctly, is an effective defense-in-depth mechanism against cross site scripting and content injection attacks. This is available in the Insider Fast ring now starting with EdgeHTML 15.15002, and will ship to stable builds with the Windows 10 Creators Update. Microsoft Edge 15.15002 on the CSP Browser Test Content Security Policy, supported in all versions of Microsoft Edge, lets web developers lock down the resources that can be used by their web application, helping prevent cross-site scripting attacks that remain a common vulnerability on the web. However, the first version of Content Security Policy was [ more... ]
The post Introducing support for Content Security Policy Level 2 appeared first on 지락문화예술공작단.
원문출처 : https://jirak.net/wp/introducing-support-for-content-security-policy-level-2/