Content Security Policy: From Newbie to Advanced

Explore the comprehensive guide to Content Security Policy (CSP) in this recorded talk from NDC Security in Oslo, Norway. Learn why this trending response header has become a PCI DSS requirement and how it unlocks powerful browser security features. Navigate through all CSP directives, enforcement modes, deprecations, fallbacks, and browser implementation variations with expert guidance. Discover efficient policy-building techniques, important considerations during implementation, and effective methods for handling user violation reports. Presented by Halvor Sakshaug, one of Stack Overflow's top answerers for Content Security Policy questions, this one-hour session provides valuable insights for both beginners and advanced practitioners to implement CSP correctly without risking website functionality.