Glossary

A Content Security Policy (CSP) is a mechanism for web developers to increase the security of their websites. By setting a Content Security Policy, web developers can instruct web browsers to only load resources from certain trusted domains, enforce secure HTTPS connections, and even report policy violations as they occur. This can prevent many content injection and cross-site scripting (XSS) vulnerabilities, which often lead to data leaks, website vandalism, and malware distribution.

Security Enhanced Linux (SELinux) is an access control system that is built into the Linux kernel. It is used to enforce policies that define which resources users, programs and services can use on a system. In its default enforcing mode, SELinux will deny and log any unauthorized attempts to…