The content security policy by itself does not 100% protect a site from attacks but it does help to diminish the possibility of a cross site scripting attack. A CSP header instructs the browser to ...