Crisper: Protecting your Polymer app with CSP -- Polycasts #40
Channel: Chrome for Developers
Date: 2016-01-27

Content Security Policy (CSP) is a set of rules to help mitigate and prevent attacks such as Cross Site Scripting (XSS) and data injection. On some platforms like Chrome Apps and Cordova it's a *requirement* that your code comply with CSP, so what does that mean if you're building a Polymer app? Today on the show we'll look at how to use a little tool called Crisper to make sure your site is protected by CSP.

Demo Source
https://goo.gl/cJBR4H

Introduction to CSP
https://developer.mozilla.org/en-US/d...

Crisper
https://github.com/PolymerLabs/crisper

gulp-crisper
https://goo.gl/uGaA7Y

Polymer Starter Kit
https://goo.gl/djOKPW

Polycasts playlist: https://goo.gl/r5fsMq 
Polymer Slack: http://bit.ly/polymerslack
 

Subscribe to the Chrome Developers channel: https://goo.gl/OUF4e2