Making Content Security Policies (CSPs) easy with Page Shield
Sep 15, 2023Michael Tremante
Summary
This post introduces full support for all major Content Security Policy (CSP) directives within Cloudflare Page Shield. It details the enhanced policy builder with smarter suggestions for `script-src` and `connect-src`, customization based on policy application context, and the ability to import existing CSP policies. The post also highlights improved violation reporting and the `upgrade-insecure-requests` directive.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack