<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Csp on Karpoke - Just Another Blog</title><link>http://karpoke.ignaciocano.com/tags/csp/</link><description>Recent content in Csp on Karpoke - Just Another Blog</description><generator>Hugo -- 0.167.0</generator><language>es</language><lastBuildDate>Wed, 15 Nov 2017 09:50:00 +0100</lastBuildDate><atom:link href="http://karpoke.ignaciocano.com/tags/csp/index.xml" rel="self" type="application/rss+xml"/><item><title>Locking Down Your Website Scripts with CSP, Hashes, Nonces and Report URI</title><link>http://karpoke.ignaciocano.com/2017/11/15/locking-down-your-website-scripts-with-csp-hashes-nonces-and-report-uri/</link><pubDate>Wed, 15 Nov 2017 09:50:00 +0100</pubDate><guid>http://karpoke.ignaciocano.com/2017/11/15/locking-down-your-website-scripts-with-csp-hashes-nonces-and-report-uri/</guid><description>&lt;blockquote&gt;
&lt;p&gt;I run a workshop titled Hack Yourself First in which people usually
responsible for building web apps get to try their hand at breaking them. As
it turns out, breaking websites is a heap of fun (with the obvious caveats)
and people really get into the exercises. The first one that starts to push
people into territory that&amp;rsquo;s usually unfamiliar to builders is the module on
XSS.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;» Troy Hunt&amp;rsquo;s Blog | &lt;a href="https://www.troyhunt.com/locking-down-your-website-scripts-with-csp-hashes-nonces-and-report-uri/"&gt;troyhunt.com&lt;/a&gt;&lt;/p&gt;</description></item></channel></rss>