CSP Menu

3 labs

Content Security Policy

Read the policy before fighting it. Every tag answers to its own directive; allowances added for features are the holes.

CSP: data: in the script allow-listReady
CSP: JSONP third-party callbacksReady
CSP: same-origin uploadsReady

⚠️ Training site — labs are deliberately vulnerable. Follow the method panels inside each lab.

← All lab sets