What is the 'Content Security Policy' (CSP) in HTML meta tags?

A security layer that helps detect and mitigate certain types of attacks, like XSS.

CSP allows you to restrict which domains the browser should consider to be valid sources of executable scripts, images, etc. It can be set via HTTP headers or a <meta> tag.