You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

Content security policy

in Database 3 comments

Hi Marcy,

Need guidance on implementing a Content Security Policy (CSP) for our Oracle APEX and ORDS-based applications.

Our architecture includes OCI WAF, Load Balancer, ORDS, and Oracle Database Service (DBCS).

Could you please advise:

  1. At which layer should we implement the CSP – WAF, Load Balancer, ORDS, or APEX?
  2. What is the recommended approach for this architecture?
  3. What potential application issues or errors could occur after enabling CSP?
  4. How can we troubleshoot CSP violations, particularly if application pages, images, scripts, or login functionality stop working?
  5. Is it mandatory?

Please share your recommendations and best practices.

Thank you.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!