SECURITY2 Multi-file Components

Content Security Policy (CSP) & Strict XSS Defense

Defends applications against Cross-Site Scripting by strictly controlling what scripts can execute in the browser.

Author: TRIHEX Architecture Lab

•

License: MIT

•

Version: 2.1.0

Inert Code Verified · Heuristic Static Security ScannerHeuristic Scanner: LOW Risk

Heuristic static security scanner audited 2 files (2520 bytes). External code. Review before execution.

v2.1.0

Skill Files (2)

Compatible Runtimes

AntigravityClaude CodeCursor

SKILL.md·markdown

# Content Security Policy (CSP) & Strict XSS Defense

Nonce-based Content Security Policy headers, DOMPurify sanitization, and Trusted Types implementation.

## Core Invariants & Rules
1. Generate dynamic cryptographic nonces per request for inline script execution.
2. Verify input validation and security boundaries on all executions.
3. Keep configurations modular, typed, and auditable.

## Operational Workflow
1. Analyze requirements against existing codebase patterns.
2. Apply standardized implementation templates.
3. Execute verification suites before deployment.