What does a Content Security Policy defend against most directly?
- A Cross-site scripting, by restricting which scripts may execute
- B SQL injection
- C Brute force attacks
- D Denial of service
Answer
Cross-site scripting, by restricting which scripts may execute
Even if a payload is injected, a strict CSP can prevent inline or third-party scripts from running.





