Scott Helme
@ScottHelme@infosec.exchange
Hacker, researcher, builder of things. Founded securityheaders.com and report-uri.com, Pluralsight author, BBC hacker in residence, award winning entrepreneur. Likes cars.
infosec.exchange
Stripe just made CSP a compliance requirement.
Merchants completing their annual PCI assessment are now asked to attest that they’ve deployed a Content Security Policy.
That’s a major shift from “you should deploy CSP” to “confirm that you have.”
Full details: https://blog.report-uri.com/stripe-now-asks-you-to-attest-that-youve-deployed-a-csp/