What does the 'Content-Security-Policy' (CSP) HTTP response header instruct a web browser to enforce?
A. To wipe local device browser cache modules automatically
B. To double the physical data processing capacity of network router cards
C. To route incoming text emails through unencrypted FTP pathways
D. To restrict the specific trusted domains from which a webpage can load scripts, styles, and assets, protecting against Cross-Site Scripting (XSS) injections
Answer: Option D
Solution (By JKSSB Mock Tests)
CSP is an effective security layer that allows site administrators to declare approved sources of content, preventing browsers from executing unauthorized or malicious scripts.
No comments yet. Be the first to start the discussion!