Overview

This is the first episode on a series of implementing Content Security Policy on web applications. This episode covers the implementation of script source policy. It provides a walk through of implementing the protection through infrastructure resource (e.g. AWS Cloudfront) and through META tags in HTML code.

References

• Setting up website with Cloudfront and S3 bucket
• Cloudfront Functions
• Cloudfront with Lambda Edge
• Cloudfront Security Response Headers

• Cloudfront as Web Proxy