Glossary: Web App Security and Authentication

CSP

Also written: Content-Security-Policy, content security policy

A response header that says where scripts, styles and images may load from. helmet's default blocks inline scripts, a second wall if escaping is missed.