The idea is quite By sending CSP from website, you telling the browser what it's authorized to execute and what it's authorized to block.
And by doing this, Content Security Policy helps block XSS vulnerabilities..
CSP allows host to specify whitelist of approved sources that browser can load content from and is effective countermeasure for XSS attacks..
Content Security Policy is delivered via HTTP response header, much like HSTS, and defines approved sources of content that the browser may load.
It can be effective countermeasure to Cross Site Scripting attacks and is also supported deployed..
This plugin was written by Laxman Thapa, Web Developer...
Read more