What are some examples of CSP headers?

Can you give me some examples of CSP headers?

Sure! Here are a few examples of CSP headers:

1. Content-Security-Policy: default-src 'self';
2. Content-Security-Policy: script-src 'self' https://apis.example.com;
3. Content-Security-Policy: img-src 'self' data:;

What does the 'self' directive mean?

The 'self' directive allows resources to be loaded from the same origin as the document. It helps prevent XSS attacks.

Can I use multiple directives in one header?

Yes, you can combine multiple directives in a single CSP header. For example: Content-Security-Policy: default-src 'self'; script-src 'self' https://apis.example.com;.

What happens if a resource is blocked by CSP?

If a resource is blocked by CSP, the browser will not load it, and you may see errors in the console indicating which resources were blocked.