Making Content Security Policies (CSPs) easy with Page Shield

What this post added

This post introduces significant enhancements to Cloudflare's Page Shield product, making Content Security Policies (CSPs) easier to manage. Key contributions include: full support for all major CSP directives (beyond the previously supported script-src), an improved suggestions engine that leverages observed network activity to auto-populate policy directives for script-src and connect-src, the ability to filter policy application by URI path, and the introduction of a feature to import existing CSP policies directly into the Page Shield interface. The post also details the `upgrade-insecure-requests` directive and discusses the ongoing roadmap for suggestions on other directives.