Security and Privacy considerations for KaiOS smart feature phonesKaiOS is based on Firefox OS, and as a result, many of the same technologies apply to Security & Privacy within KaiOS apps. Content Security Policy (CSP)The Content Security Policy (CSP) prevents attacks like Cross-Site Scripting (XSS) by limiting the origins that specific resources like scripts, objects, and stylesheets can be loaded from. KaiOS imposes default CSPs on Privileged & Certified packaged apps.