lookup> Content-Security-Policy

Content-Security-Policy

is the preferred mechanism for delivering a CSP policy

响应头CSP

Quick facts

NameContent-Security-Policy

Type响应头

SpecificationCSP

Description

is the preferred mechanism for delivering a CSP policy

Syntax

Content-Security-Policy: default-src 'self'

Related headers

Frequently asked questions

is the preferred mechanism for delivering a CSP policy

It is classified as a response header and can appear in requests or responses depending on context.

Sources & standards

Updated 2026-08-18

Explore this reference