CSP or Content Security Policy Header Reference Guide and Examples| content-security-policy.com
Content Security Policy can significantly reduce the risk and impact of cross-site scripting attacks in modern browsers.| web.dev
infosec.mozilla.org : Guidelines, principles published on https://infosec.mozilla.org| infosec.mozilla.org