Website Security & Threat Management
Locking down your JavaScript: positive blocking with Page Shield policies

Locking down your JavaScript: positive blocking with Page Shield policies

3/13/2023 · Michael Tremante

What this post added

Introduced Page Shield policies, a new feature for Cloudflare's client-side security solution. These policies leverage Content Security Policies (CSPs) to implement a positive security model, allowing administrators to define approved lists of external JavaScript libraries and connection endpoints. The feature aims to reduce the attack surface by preventing the execution of unvetted scripts and limiting data exfiltration. It includes a suggestions feature to simplify CSP management and supports both 'report only' and 'enforce' modes.

Read the original post ↗