Content-Security-Policy in ASP.NET MVC
In this post, I'll explain the Content-Security-Policy header and how to set it up in an ASP.NET, MVC or Web API application. For existing websites, I'll show you how to add all the required bits gradually, by utilizing tools built into most modern browsers and elmah.io. Make sure no-one injects code on your website.
Tags: dotnet, csharp, security, aspnet