Julia Evans on Nostr: if your company sets a `Content-Security-Policy` header: who's in charge of deciding ...
Published at
2025-11-20 19:49:48 UTCEvent JSON
{
"id": "15cbce7c295a60fb53290fb433cc5370c52bbf0363909be7b56b0f2675306a21",
"pubkey": "26cad6f140bf86de9c26b7c15419cab1aebdd7086358d26aa2d750e21cf3bf2e",
"created_at": 1763668188,
"kind": 1,
"tags": [
[
"proxy",
"https://social.jvns.ca/users/b0rk/statuses/115583758416386330",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "if your company sets a `Content-Security-Policy` header: who's in charge of deciding what it should be? (someone in security? someone who works on the frontend? other? multiple people?) \n\nhttps://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP",
"sig": "8fac203ca8ce0fc00d0bd167c6ebebba9fd6d882c716f711ec48cccef9a9850112ec596aa24706c179c8bf6d85de03dac53ad2f062522de7dbb954103c989a99"
}