Ctrl K
Sign inStart free
Frontend · Senior · Theory

How do you protect a frontend against XSS, and how would you roll out a Content Security Policy in a large application that's already in production?

~4 min by voice

How to approach it

This checks whether the candidate understands XSS as a threat model with several layers of defense: safe rendering and sanitization in code, CSP as a browser-level safety net. Interviewers also look at whether they can roll out CSP safely in a live product without breaking anything.

Have you seen this question in a real interview?
Answers0
Avg. score—
Strong—
Practiced0
Topics
xsscsp
Similar questionsWhat is an XSS attack, and how does the frontend protect against it? JuniorWhere would you store the auth token in an SPA, in localStorage or in a cookie, and which attacks does that protect against and which doesn't it? Mid-level

Answer by voice

The interviewer will ask this question and listen. Think out loud and ask for a hint if you need one. When you're done, pause or tap “That's my answer”. In about a minute, your score and the points you covered show up here.

Sign in to answer

Best with headphones · ~4 min