Review a Content Security Policy
Analyze supplied response headers and HTML references to determine what a Content Security Policy permits, blocks, or leaves unprotected.
Analyze supplied response headers and HTML references to determine what a Content Security Policy permits, blocks, or leaves unprotected.
Prepare 25m · Build 105m · Verify 25m · Document 25m
Work only inside the folder created by Smartphone-Academy.py prepare csp-review. Use the supplied fictional samples or data you are explicitly authorized to handle.
Prepare the Termux workspace
Open Termux in the Academy folder and create the safe workspace. The companion generates samples, notes, and evidence files under your account.
python Smartphone-Academy.py prepare csp-reviewNo root. Work only with the supplied files under $HOME.Practical mission
- Map every CSP directive to the resource types used by the supplied HTML
- Identify missing fallback directives, broad sources, and inline-code dependencies
- Draft a stricter report-only policy without claiming it is production-ready
- Describe a staged validation plan that avoids breaking the fictional application
A csp-review.md with directive mapping, likely gaps, compatibility concerns, and a safer proposed policy for the fictional site.
Quality gate
Analyst reflection
Which result from “Describe a staged validation plan that avoids breaking the fictional application” needs additional evidence before it could support a real operational decision?
After checking the deliverables, run python Smartphone-Academy.py complete csp-review. Progress is stored locally in the Termux home directory.