Content Security Policy (CSP)

Content Security Policy (CSP) is a security measure that can be implemented through a Content-Security-Policy response header or equivalent element. It allows developers to restrict the sources from which resources, such as JavaScript, CSS, images, files, etc., are loaded. CSP can be an effective defense against some types of attacks, such as cross-site scripting (XSS) and Clickjacking.

Here are the tools that can help you to audit and generate CSP

CSP-evaluator: https://csp-evaluator.withgoogle.com/
CSP Auditor: https://portswigger.net/bappstore/35237408a06043e9945a11016fcbac18
Content Security Policy (CSP) Generator Chrome extension: https://chrome.google.com/webstore/detail/content-security-policy-c/ahlnecfloencbkpfnpljbojmjkfgnmdc

Content Security Policy (CSP) Generator Firefox extension: https://addons.mozilla.org/en-US/firefox/addon/csp-generator/

Free Learning Resources for Application Security and Penetration Testing

Learning portal for Application Security and DevSecOps Engineers. It contains well-written and in-depth articles on Software Security and DevSecOps

blogs.appsecworld.com