Content Security Policy Level 1

Allows you to create a whitelist of sources of trusted content, and instructs the browser to only execute or render resources from those sources.

Specification

Established standard

Status in Chromium

Blink components: Blink

Enabled by default (launch bug) in:

• Chrome for desktop release 14
• Opera release 15
• Opera for Android release 15

Consensus & Standardization

• Firefox: Shipped
• Edge: Shipped
• Safari: Shipped
• Web Developers: Mixed signals

Owners

• mkwst@chromium.org
• abarth@chromium.org

Last updated on 2017-06-14