| Description |
This article describes how to add a Content Security Policy (CSP) header to prevent XSS and data injection attacks and explains the effects. |
| Scope | FortiAppSec Cloud. |
| Solution |
If there is an existing CSP header on the website or application and this policy on FortiAppSec Cloud under HTTP header security is enabled, FortiAppSec Cloud will replace the CSP header.
Simple Apache website before FortiAppSec Cloud:
FortiAppSec Cloud CSP header policy:
After FortiAppSec Cloud:
|
