Great article. Somebody else mentioned Scott Helme, but didn't link to three of his amazing sites: https://securityheaders.com https://securityheaders.com whi

Great article. Somebody else mentioned Scott Helme, but didn't link to three of his amazing sites: https://securityheaders.com https://securityheaders.com which checks important headers https://report-uri.com/ https://report-uri.com/ which allows sending CSP reports to to catch errors. It also has a CSP builder (among a bunch of tools) which is hugely helpful: https://report-uri.com/home/generate https://report-uri.com/home/generate https://scotthelme.co.uk/ https://scotthelme.co.uk/ is his blog with a ton of info. It also has a cheat sheet for CSP: https://scotthelme.co.uk/csp-cheat-sheet/ https://scotthelme.co.uk/csp-cheat-sheet/ (I might be a fan of the guy ha)