Content Security Policies: Let's Break Stuff

A presentation at Dutch PHP Conference in in Amsterdam, Netherlands by Matt Brunt

Content Security Policies are another tool we should have in our security toolbelt to help protect users of our sites. In this session you’ll learn what they are, why they’re needed, how they work and the limitations on what they can & cannot do to protect users.

You’ll see a demo of attacks a CSP will block, you’ll see a site broken by a CSP, show what the different CSP directives & options will do and be introduced to some of the tools available to help with implementing a CSP on your sites!

Resources

The following resources were mentioned during the presentation or are useful additional information.