web.archive.org/web/20180512223532/http:/githubengineering.com/githubs-csp-journey

Preview meta tags from the web.archive.org website.

Linked Hostnames

1

Search Engine Appearance

Google

https://web.archive.org/web/20180512223532/http:/githubengineering.com/githubs-csp-journey

GitHub’s CSP journey

We shipped subresource integrity a few months back to reduce the risk of a compromised CDN serving malicious JavaScript. That is a big win, but does not address related content injection issues that may exist on GitHub.com itself. We have been tackling this side of the problem over the past few years and thought it would be fun, and hopefully useful, to share what we have been up to.



Bing

GitHub’s CSP journey

https://web.archive.org/web/20180512223532/http:/githubengineering.com/githubs-csp-journey

We shipped subresource integrity a few months back to reduce the risk of a compromised CDN serving malicious JavaScript. That is a big win, but does not address related content injection issues that may exist on GitHub.com itself. We have been tackling this side of the problem over the past few years and thought it would be fun, and hopefully useful, to share what we have been up to.



DuckDuckGo

https://web.archive.org/web/20180512223532/http:/githubengineering.com/githubs-csp-journey

GitHub’s CSP journey

We shipped subresource integrity a few months back to reduce the risk of a compromised CDN serving malicious JavaScript. That is a big win, but does not address related content injection issues that may exist on GitHub.com itself. We have been tackling this side of the problem over the past few years and thought it would be fun, and hopefully useful, to share what we have been up to.

  • General Meta Tags

    10
    • title
      GitHub’s CSP journey | GitHub Engineering
    • content-type
      text/html; charset=utf-8
    • viewport
      width=device-width, initial-scale=1.0, maximum-scale=1
    • octolytics-app-id
      internal-engineering-blog
    • generator
      Jekyll v3.7.3

  • Open Graph Meta Tags

    6
    • og:title
      GitHub’s CSP journey
    • US country flagog:locale
      en_US
    • og:description
      We shipped subresource integrity a few months back to reduce the risk of a compromised CDN serving malicious JavaScript. That is a big win, but does not address related content injection issues that may exist on GitHub.com itself. We have been tackling this side of the problem over the past few years and thought it would be fun, and hopefully useful, to share what we have been up to.
    • og:url
      https://web.archive.org/web/20180510212802/https://githubengineering.com/githubs-csp-journey/
    • og:site_name
      GitHub Engineering

  • Twitter Meta Tags

    3
    • twitter:card
      summary
    • twitter:site
      @GitHubEng
    • twitter:creator
      @patricktoomey

  • Link Tags

    12
    • alternate
      https://web.archive.org/web/20180510212802/https://githubengineering.com/atom.xml
    • canonical
      https://web.archive.org/web/20180510212802/https://githubengineering.com/githubs-csp-journey/
    • profile
      http://gmpg.org/xfn/11
    • shortcut icon
      /web/20180510212802im_/https://githubengineering.com/images/favicon.ico
    • stylesheet
      https://web-static.archive.org/_static/css/banner-styles.css?v=p7PEIJWi

Links

32