Crisper: Protecting your Polymer app with CSP -- Polycasts #40

Опубликовано 27 января 2016, 22:03

Content Security Policy (CSP) is a set of rules to help mitigate and prevent attacks such as Cross Site Scripting (XSS) and data injection. On some platforms like Chrome Apps and Cordova it's a *requirement* that your code comply with CSP, so what does that mean if you're building a Polymer app? Today on the show we'll look at how to use a little tool called Crisper to make sure your site is protected by CSP.

Demo Source
goo.gl/cJBR4H

Introduction to CSP
developer.mozilla.org/en-US/d....

Crisper
github.com/PolymerLabs/crisper

gulp-crisper
goo.gl/uGaA7Y

Polymer Starter Kit
goo.gl/djOKPW

Polycasts playlist: goo.gl/r5fsMq
Polymer Slack: bit.ly/polymerslack


Subscribe to the Chrome Developers channel: goo.gl/OUF4e2