The ten steps

About an hour end to end. Every step stands on its own, so stopping after step 3 still leaves you better off than when you started — you will have a policy deployed and reporting.

1. What CSP actually does3 min
2. Deploy one today and break nothing5 min
3. Read a violation report5 min
4. The directives that matter6 min
5. Why allowlists fail6 min
6. Nonces and strict-dynamic7 min
7. How nonces go wrong5 min
8. Third parties and the real rollout6 min
9. The four everyone forgets5 min
10. Ship it5 min

No account, no progress bar, nothing saved. Bookmark wherever you get to.