2 ms·
Couldn't this be simple solved with X-Content-Security-Policy header in order to prevent non-authorized domains to run objects on the site ?
by phatbyte 15y ago
Couldn't this be simple solved with X-Content-Security-Policy header in order to prevent non-authorized domains to run objects on the site ?
- tptacek 15y agoWhen most browsers support CSP, maybe. Most don't today.