Content Security Policy (CSP)

CSP is a web security standard that helps prevent common attacks like cross-site scripting (XSS) and data injection. It works by allowing a website to define a whitelist of trusted domains from which the browser is permitted to load resources (such as scripts, styles, and images). A properly configured CSP can significantly improve a site's security.