W3C Invites Implementations of Content Security Policy Level 2


The Web Application Security Working Group has published a Candidate Recommendation of Content Security Policy Level 2. This specification updates Content Security Policy, fine-tuning the existing policy options, and introducing a number of new mechanisms that site authors can use to mitigate the risk of content injection and related attacks. Major differences from Content Security Policy Level 1 may be found in Section 1.1 of the document.
With this publication, we move the earlier edition off the Recommendation Track to a Note (Content Security Policy 1.0) and invite implementers to share their experience with CSP Level 2. Learn more about the Security Activity.

Comments

Post a Comment

Popular posts from this blog

SEO vs AEO vs GEO vs SXO vs AIO in 2026: The Complete Guide to Winning Search and AI Discovery

Image
Search Has Changed Forever For more than two decades, SEO (Search Engine Optimization) was enough to attract visitors from search engines. Businesses focused on keywords, backlinks, technical SEO, and content quality. Today, search is dramatically different. Users no longer search only on Google. They also ask questions in AI assistants like ChatGPT, Gemini, Claude, Perplexity, and Copilot. Instead of showing ten blue links, AI now generates direct answers, summaries, recommendations, and citations. This shift has introduced several new optimization approaches: SEO AEO (Answer Engine Optimization) GEO (Generative Engine Optimization) SXO (Search Experience Optimization) AIO (AI Optimization) These approaches complement each other rather than compete. Successful websites in 2026 combine all five into one comprehensive strategy. Google itself has emphasized that optimizing for AI search still relies on strong SEO fundamentals, while AI-first experiences increase the importance of qualit...
Read more

First Public Working Draft: Quantum-Resistant Cryptosuites v1.0 – W3C Takes a Major Step Toward a Post-Quantum Web

Image
As quantum computing advances, today's widely used cryptographic algorithms—including RSA and Elliptic Curve Cryptography (ECC)—may eventually become vulnerable. To help prepare the web ecosystem for this transition, the World Wide Web Consortium (W3C) has published the First Public Working Draft (FPWD) of Quantum-Resistant Cryptosuites v1.0 . This milestone represents one of the first major web standards efforts focused on integrating post-quantum cryptography (PQC) into digital credentials and identity systems. In this article, we'll explore what this new specification is, why it matters, and how it could shape the future of secure digital identity across the web. What is Quantum-Resistant Cryptosuites v1.0? Quantum-Resistant Cryptosuites v1.0 is a new W3C specification that defines standardized cryptographic suites designed to create and verify digital proofs using post-quantum digital signature algorithms . Unlike traditional cryptographic algorithms that rely on mathemat...
Read more

Open Task Forces to Discuss Web Schemas, Data Formats

The W3C's Semantic Web Interest Group has recently launched two new task forces to foster open collaboration and innovation in the world of web schemas and structured data. This move marks a significant step forward in enhancing how structured information is represented, shared, and understood across the web. A Shared Language for the Web At the center of this initiative is the growing adoption of schema.org , which provides a rich collection of schemas that webmasters can use to markup their pages in ways recognized by major search providers like Google, Bing, Yahoo, and Yandex. These schemas help search engines better understand content, leading to richer, more accurate search results and a more interconnected web. The widespread support for schema.org underscores the importance of a shared vocabulary for structured data. However, as the ecosystem evolves, so too must the tools and standards that support it. To address the complexities and opportunities ahead, two new task for...
Read more