> This page says CSP is managed "through a web interface", which worries me a bit. Administrators can update a JSON file that is used by CSP-Builder to generat

> This page says CSP is managed "through a web interface", which worries me a bit. Administrators can update a JSON file that is used by CSP-Builder to generate the Content-Security-Policy headers. We wanted to normalize this browser securtiy feature and make it user friendly for users to manage these headers.