
In our previous blog post, we've touched on most elements of Content Security Policy (CSP) to mitigate any kind of injection via Cross-Site-Scripting. Now, let's dive into the practical part on how to make your TYPO3 site more secure by sending CSP Headers by default.