feat(curriculum): add security and privacy review#68238
Open
Ksound22 wants to merge 1 commit into
Open
Conversation
zairahira
reviewed
Jun 26, 2026
| **Content Security Policy (CSP)** is an HTTP response header that restricts which external resources a browser can load on a page. It defends primarily against **Cross-Site Scripting (XSS)** attacks by whitelisting trusted source domains for scripts, styles, and images. | ||
|
|
||
| ```http | ||
| Content-Security-Policy: script-src 'self' https://trusted-cdn.com; |
Member
There was a problem hiding this comment.
This example isn't mentioned in the lecture files. You can either add an explanation in the lecture or remove the code from here.
Comment on lines
+70
to
+71
| - **`SameSite=Strict`:** Prevents the browser from sending the cookie on any cross-site request, blocking CSRF attacks. | ||
| - **`SameSite=Lax`:** Allows cookies on safe top-level navigation but blocks them on cross-site form submissions and API requests. |
Member
There was a problem hiding this comment.
While SameSite is mentioned in the lectures, its arguments like SameSite=Lax and SameSite=Strict aren't. These should either be added to the lectures or removed from here.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Checklist:
mainbranch of freeCodeCamp.Closes #XXXXX