csp
AI security interview questions tagged csp, across every topic.
4 questions · 2 unlocked for you
Concepts behind "csp"
Explanations of the mechanisms these questions rely on.
Foundational
Cross-Site Scripting and Output EncodingCross-site scripting (XSS) is injection into a browser: attacker-controlled content ends up in a page as executable script, running with the site's origin and the victim's session. It comes in stored, reflected and DOM-based forms. The fixes are contextual output encoding (frameworks do this by default), sanitisation when HTML must be rendered, and a strict Content Security Policy as a second layer. Chat interfaces that render model output as HTML or Markdown are a new and common source. Application Security
Foundational
Data Exfiltration Channels in LLM ApplicationsAn injected model that has read private data still needs a way to get it out. LLM applications offer many: explicit tools such as email or HTTP, URLs the model asks a tool to fetch, markdown images and links that clients load or users click, link previews, and content written somewhere the attacker can read. Closing these channels deterministically is one of the most reliable defences against prompt injection, because it works no matter how the injection was phrased. LLM Application Security
Core
Content Security Policy in DepthA Content Security Policy is a response header the browser enforces for one document: it decides which scripts, styles, frames and connections the page may use, blocks the rest and can report violations. Host allowlists failed in practice because allowed domains host code an attacker can reuse. A strict policy trusts scripts by per-response nonce or by hash, propagates trust with strict-dynamic, and adds object-src and base-uri. Trusted Types closes DOM sinks. CSP limits XSS impact; it does not fix XSS or stop data leaving. Application SecuritySign in