Content Security Policy Website Examples

Content Security Policy (CSP) is not a product but an HTTP security header standard that lets a site restrict which sources scripts, styles, and other resources may load from, reducing the risk of XSS attacks. Our engine detects a configured CSP through 1 HTTP header check and 1 meta-tag pattern (`Content-Security-Policy`, delivered either as a response header or an equivalent `<meta>` tag). Its presence in our results is a security-posture signal, not a builder or vendor identification. Reference: MDN's CSP documentation.