All challenges
Code AnalysisIntermediate 45s

CSP header decode

What does this CSP allow?
Starter code
Content-Security-Policy: default-src 'self'; script-src 'self' https://cdn.example.com

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle