Documentation

Enterprise Code-Level Content Security Policies

Hardening browser frames using secure directives to enforce zero-leak guarantees.

CSP as a Defensive Sandbox

To prevent loaded scripts or third-party assets from siphoning volatile key registers, companies enforce Content Security Policies (CSP). By setting strict boundaries, you ensure that requests can ONLY be dispatched to verified nodes.

Example CSP Header Directives

Content-Security-Policy: default-src 'self'; connect-src 'self' http://localhost:11434 https://api.openai.com https://api.anthropic.com https://api.gemini.com;