ToolypetMCP
advanced6 minutescross hub

Content Security Pipeline

Secure web content delivery with CSP, SRI for CDN resources, CORS configuration, and security audit.

cspsricorscdnsecurity

Wann dieses Rezept verwenden

Protect your website from XSS, CDN supply chain attacks, and unauthorized API access. Essential for any production site serving content from multiple origins.

Schritte

1

Create Content Security Policy

Eingabeaufforderung:Generate CSP allowing self, Google Fonts, CDN scripts, and inline styles for a production site
2

Audit the CSP quality

Eingabeaufforderung:Evaluate the CSP for security weaknesses and grade it
3

Protect CDN resources

Eingabeaufforderung:Generate SRI hashes for all CDN-loaded JavaScript and CSS files
4

Set up cross-origin policies

Eingabeaufforderung:Configure CORS headers for the CDN and API endpoints

Häufig gestellte Fragen

What is SRI and why does it matter?

Subresource Integrity (SRI) ensures CDN-hosted scripts haven't been tampered with. If a CDN is compromised, SRI prevents the modified script from executing on your site.

Can CSP break my website?

Yes, an overly strict CSP can block legitimate resources. Start with Content-Security-Policy-Report-Only to log violations without blocking, then tighten gradually.

Verwandte Rezepte