Content Security Policy Courses and Certifications

Defeating Cross-site Scripting with Content Security Policy 2

41 ratings at Pluralsight

Content Security Policy (CSP) is a W3C standard that limits what a browser may do, which helps prevent many common attacks, including Cross-site Scripting. This course will teach you all relevant CSP features and which browsers they work in.

• Pluralsight
• 2 hours 23 minutes
• On-Demand
• Free Trial Available

OWASP Foundation

Pushing Content Security Policy to Production - Case Study of Real-World Implementation

Practical insights on implementing Content Security Policy in a live web application, covering challenges, browser nuances, third-party integrations, and real-world violation reports.

• YouTube
• 51 minutes
• On-Demand
• Free Video

OWASP Foundation

Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions

Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

Making CSP Great Again - Enhancing Content Security Policy

Explore advanced Content Security Policy techniques to enhance web application security and mitigate XSS vulnerabilities effectively.

• YouTube
• 44 minutes
• On-Demand
• Free Video

OWASP Foundation

CSP - The Good, the Bad and the Ugly

Explore Content Security Policy's strengths and weaknesses in web application security, presented by Shape Security's engineering manager Ilya Nesterov at APPSEC CA 2017.

• YouTube
• 37 minutes
• On-Demand
• Free Video

OWASP Foundation

Content Security Policy Evolution: From Whitelists to Strict-Dynamic - AppSec EU 2017

Explore Content Security Policy evolution, including 'strict-dynamic' approach, real-world implementation challenges, and strategies to address recent bypasses of nonce-based policies.

• YouTube
• 35 minutes
• On-Demand
• Free Video

OWASP Foundation

Content Security Policy (CSP) - Understanding and Implementing Web Protection

Learn about Content Security Policy (CSP), a powerful browser security feature that mitigates cross-site scripting attacks. Discover its benefits, implementation strategies, and future impact on web security.

• YouTube
• 32 minutes
• On-Demand
• Free Video

OWASP Foundation

Fixing XSS with Content Security Policy

Learn how Content Security Policy (CSP) can prevent XSS attacks, understand its versions, browser support, and implementation strategies for web applications. Gain insights on balancing CSP with traditional security measures.

• YouTube
• 58 minutes
• On-Demand
• Free Video

OWASP Foundation

Making Content Security Policy Work For You

Learn about Content Security Policy (CSP), its importance in web application defense, and practical tips for implementation from Mozilla's application security expert.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

Content Security Policy Reporting and Aggregation with Caspr - OWASP AppSec California 2015

Explore Content-Security-Policy (CSP) violation reporting with Caspr, a tool for collecting and analyzing reports. Learn about CSP background, Caspr usage, and related tools for enhancing web application security.

• YouTube
• 51 minutes
• On-Demand
• Free Video

LASCON

Mind the CSP Gap: Challenges Developing a Meaningful Content-Security-Policy

Strategies for implementing Content Security Policy (CSP) effectively, addressing challenges and phasing in a meaningful policy without disrupting engineering teams.

• YouTube
• 36 minutes
• On-Demand
• Free Video

OWASP Foundation

Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management

Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Black Hat

Back to the Roots - Finding the Origin of CSP Security Bugs

Explore the root causes of Content Security Policy bugs in web browsers, their lifecycle, and insights for both attackers and defenders using automated analysis tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Packt

Web Hacking Expert - Full-Stack Exploitation Mastery

Master full-stack web exploitation techniques, from bypassing CSP to exploiting AngularJS vulnerabilities. Gain hands-on experience with real-world attack vectors, including race conditions, HTTP parameter pollution, and subdomain takeovers.

• Coursera
• 6 hours 16 minutes
• On-Demand
• Free Online Course (Audit)

Play by Play: Modern Web Security Patterns

145 ratings at Pluralsight

This course will help you establish proper patterns and protocols to help keep yourself on the more secure side of web security rather than unsecure.

• Pluralsight
• 1 hour 24 minutes
• On-Demand
• Free Trial Available