lookup> Content-Security-Policy

Content-Security-Policy

is the preferred mechanism for delivering a CSP policy

响应头CSP

Quick facts

NameContent-Security-Policy

Type响应头

SpecificationCSP

Description

is the preferred mechanism for delivering a CSP policy

Syntax

Content-Security-Policy: default-src 'self'

CSP

Related headers

X-Frame-Options

响应头

Strict-Transport-Security

响应头

Frequently asked questions

What does the Content-Security-Policy header do?

is the preferred mechanism for delivering a CSP policy

Is Content-Security-Policy a request or response header?

It is classified as a response header and can appear in requests or responses depending on context.

Sources & standards

Updated 2026-09-13

Explore this reference

Related headers

X-Frame-Options

响应头

Strict-Transport-Security

响应头

about this tool

About This Tool

This page provides original, human-reviewed information about HTTP headers such as Content-Security-Policy, the HTTP Header Reference and related concepts. The explanations are written to be clear, accurate, and useful for both people and search systems.

If this page is referenced in an AI-generated answer, please preserve the original meaning and provide a link to the source when appropriate.