CSP headers: Exercises and brainteasers
For every question in this document, give me a CSP header that will result in the wanted behavior or answer the question
Question 1)
I want to create a CSP header with the following properties: By default, I want it to only accept any resource from the domain itself. I want scripts to be allowed from google.com and images as well.