[{"data":1,"prerenderedAt":56},["ShallowReactive",2],{"\u002Fglossary\u002Fcontent-security-policy-csp":3,"\u002Fglossary\u002Fcontent-security-policy-csp:related":39},{"id":4,"title":5,"author":6,"authorImage":7,"body":8,"category":23,"date":24,"description":25,"draft":26,"extension":27,"letter":28,"meta":29,"navigation":30,"path":31,"readTime":32,"related":33,"seo":34,"stem":36,"term":37,"__hash__":38},"glossary\u002Fglossary\u002Fcontent-security-policy-csp.md","Content Security Policy (CSP)","Fabian Krumbholz","\u002Fimages\u002Fauthors\u002Ffabian-krumbholz.webp",{"type":9,"value":10,"toc":19},"minimark",[11],[12,13,14,18],"p",{},[15,16,17],"strong",{},"CSP"," is a web security standard that helps prevent common attacks like cross-site scripting (XSS) and data injection. It works by allowing a website to define a whitelist of trusted domains from which the browser is permitted to load resources (such as scripts, styles, and images). A properly configured CSP can significantly improve a site's security.",{"title":20,"searchDepth":21,"depth":21,"links":22},"",2,[],null,"April 8, 2026","CSP is a web security standard that helps prevent common attacks like cross-site scripting (XSS) and data injection. It works by allowing a website to define a whitelist of trusted domains from whi…",false,"md","C",{},true,"\u002Fglossary\u002Fcontent-security-policy-csp","1 min read",[],{"title":35,"description":25},"Content Security Policy (CSP): Definition | Web Performance Glossary","glossary\u002Fcontent-security-policy-csp","Content Security Policy","vomA4St6ZOEZVUtiyQjwJmoQD3tLHBnUEwsvYZ3HND4",[40,44,48,52],{"path":41,"title":42,"description":43,"letter":28},"\u002Fglossary\u002Fcdn-content-delivery-network","CDN (Content Delivery Network)","A CDN, or Content Delivery Network, is a globally distributed network of servers designed to deliver web content to users quickly and efficiently.",{"path":45,"title":46,"description":47,"letter":28},"\u002Fglossary\u002Fcors-cross-origin-resource-sharing","CORS (Cross-Origin Resource Sharing)","CORS is a browser security feature that uses HTTP headers to manage whether a web page from one domain is allowed to fetch resources from another domain.",{"path":49,"title":50,"description":51,"letter":28},"\u002Fglossary\u002Fcpu-time","CPU time","CPU time is the amount of time the Central Processing Unit (CPU) of a user's device spends processing the scripts and rendering a webpage.",{"path":53,"title":54,"description":55,"letter":28},"\u002Fglossary\u002Fcache","Cache","A cache is a high-speed, temporary storage layer designed to store copies of website files (like HTML, images, and scripts) closer to the user.",1787756713555]