A content Security Policy or CSP is a HTTP response header that defines what sources of content can be loaded on a web page. It is a way to combat Cross Site Scripting (XSS) attacks. What is a XSS attack then? When you load a webpage it also loads various other resources like images, some css style sheets, various...