: Why everyone uses unsafe content security policy? I see that all big websites like Google or Facebook, even my bank uses content-security-policy header with unsafe-eval and unsafe-inline. Is there

@Mendez628

Posted in: #HttpHeaders #Javascript

I see that all big websites like Google or Facebook, even my bank uses content-security-policy header with unsafe-eval and unsafe-inline. Is there point in using csp if such big companies disable it? Are there big websites that use csp without unsafe scripts?

Vote Up Vote Down

Login to post a comment!