Black and white Computer

What is Content Security Policy? Content Security Policy is internet security standard to prevent the known attack like Cross-site scripting XSS, click hijacking and code injection. For example like, if your visiting website is http://www.example.com  then you only able to access the data come from http://www.example.com, others URL or script and CDN like http://google.com/jquery.js also will be blocked. Beside that, it also contain some inline script <button onclick="testing()">Click Me!</button> will also be blocked. unless you do some configuration on the header. In short, it will do the following: 1) Whitelist to tell the client (Normally is Browser) what's allowed and what is not allowed. 2) Learn what directives are available 3) Learn the keywords they take 4) Inline code and eval () are considered harmful 5) Report Policy violations to your server before enforcing them. How to implement Content Security Policy (CSP)? <system.webS...

Enable go to the URL of the text file without extension Last week I was trying to install the SSL certificate using Let's Encrypt open source SSL. Using the ZeroSSL . Inside the progress, there is one part require the user to verify the website is own by the users. To get to verify, it needs the specific link with specific content. So in order to create the link follow the step below: 1) Create a virtual directory in IIS (Assume you know how to do it) =| 2) Setup the web config on the virtual directory by pasting the config into webconfig. <?xml version="1.0" encoding="UTF-8"?> <configuration>     <system.webServer>         <directoryBrowse enabled="true" />                                     <staticConte...