Glossary: Threat Vectors: Files, Networks and Endpoints

Content Security Policy

Also written: CSP

A browser security rule that a website sends, listing which domains scripts may load from. Alex set the shop to allow only its own domain and the payment company's, so a planted script from anywhere else will not run.