DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
Web Security
What kind of attack can succeed even under a well-configured CSP, illustrating why it's not a complete replacement for escaping?
A
None — a well-configured CSP blocks 100% of all possible attacks
B
An attacker-controlled value injected into an already-allowed script's DATA (not requiring new script execution), which CSP has no mechanism to inspect or block
C
Any attack becomes impossible once object-src 'none' is set
D
CSP blocks all forms of data exfiltration automatically
Check Answer