Frontend Security Csp And Xss Hardening

Use When

• Internet-facing UI with rich user content
• Security review flagged XSS or CSP gaps

Workflow

1. Define CSP policy per environment with nonce or hash strategy
2. Sanitize untrusted HTML and URL inputs
3. Restrict inline scripts and dangerous DOM APIs
4. Audit third-party scripts and dependencies
5. Validate security headers at edge and app layers

Required Checks