You can now develop with Blazor in Visual Studio using a strong CSP. You should always develop with HTTPS and you should always use the same CSP in development as in production. This prevents developers adding unsecure scripts and styles before it gets expensive to remove them. This also helps you not deploying unsecure HTTP links or references to CDNs.

3m read timeFrom damienbod.com
Post cover image
Table of contents
How to define good security headersNotesLinks

Sort: