Home▸Cybersecurity▸Web Security Headers: CSP, CORS & SRI

🛡 Web Security Headers: CSP, CORS & SRI

Toggle Content-Security-Policy, CORS and Subresource Integrity on and off and watch a simulated browser enforce (or fail to enforce) each defense against an untrusted script, a cross-origin fetch and a tampered CDN file.

Cybersecurity2DModerate60 FPS

About This Demo

CSP, CORS and SRI are three independent HTTP-header defenses that all rely on the browser, not the server, to enforce the final decision. This sandbox flips each one on and off and replays a realistic attack against the resulting policy so the difference is visible immediately, without touching a real network.

⚙ Under the hood

Toggle Content-Security-Policy, CORS and Subresource Integrity on and off and run a simulated browser through three attacks: an untrusted script tag, a cross-origin fetch and a tampered CDN file, to see exactly when each header blocks the threat and when it does not.

cspcorssrihttp headersweb securitycybersecuritycontent security policysubresource integrity

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install