There are four main weaknesses in CSP that can expose you to e-skimming breaches: Excessive “allow list” rules or whitelisting. CSP bypass techniques. Incorrect CSP implementation.
CSP implementation tradeoffs.