{"json_modified": "2016-03-28T08:45:48.319023", "uuid": "5cad710f-334f-4bb2-9311-b63274b4f873", "title": "CSP", "url": "/en-US/docs/Glossary/CSP", "tags": ["Infrastructure", "HTTP", "Glossary"], "translations": [{"uuid": "96f650ac-65df-49bc-9a60-57b31f61b320", "title": "CSP", "url": "/fr/docs/Glossaire/CSP", "tags": ["Glossaire", "HTTP", "Infrastructure"], "summary": "Un CSP (Content Security Policy) est utilis\u00e9 pour d\u00e9tecter et restreindre certains types d'attaques visant des sites web comme les failles <a class=\"glossaryLink\" href=\"/fr/docs/Glossary/XSS\" title=\"La d&#xE9;finition de ce terme (&#xAB;&#xA0;XSS&#xA0;&#xBB;) n'a pas encore &#xE9;t&#xE9; r&#xE9;dig&#xE9;e. Nous serions heureux de vous voir l'&#xE9;crire&#xA0;!\">XSS</a> et les injections de donn\u00e9es.", "localization_tags": [], "locale": "fr", "last_edit": "2016-01-10T09:26:37", "review_tags": []}], "modified": "2015-07-07T02:19:18", "label": "CSP", "localization_tags": [], "locale": "en-US", "id": 156163, "last_edit": "2015-07-07T02:19:17", "summary": "A CSP (Content Security Policy) is used to detect and mitigate certain types of website related attacks like <a class=\"glossaryLink\" href=\"/en-US/docs/Glossary/XSS\" title=\"XSS: Cross-site scripting (XSS) is a security exploit which allows an attacker to inject malicious client-side code into a website, which is then executed by the victims. The intent is to allow a person to bypass access controls and impersonate users. According to the Open Web Application Security Project,&#xA0;XSS is the third most common vulnerability in web applications for 2013.\">XSS</a> and data injections.", "sections": [{"id": "Learn_more", "title": "Learn more"}, {"id": "General_knowledge", "title": "General knowledge"}, {"id": "Technical_knowledge", "title": "Technical knowledge"}], "slug": "Glossary/CSP", "review_tags": []}