Bird
0
0

Why is it important to avoid using 'unsafe-inline' in your Django Content Security Policy?

hard📝 Conceptual Q10 of 15
Django - Security Best Practices
Why is it important to avoid using 'unsafe-inline' in your Django Content Security Policy?
ABecause it prevents loading external images
BBecause it causes the website to load slower
CBecause it disables the protection against cross-site scripting attacks
DBecause it breaks user authentication
Step-by-Step Solution
Solution:

  1. Step 1: Understand 'unsafe-inline' effect

    Using 'unsafe-inline' allows any inline scripts, removing CSP's protection against malicious scripts.

  2. Step 2: Recognize security risk

    This makes the site vulnerable to cross-site scripting (XSS) attacks.

  3. Final Answer:

    Because it disables the protection against cross-site scripting attacks -> Option C

  4. Quick Check:

    'unsafe-inline' disables XSS protection = Because it disables the protection against cross-site scripting attacks [OK]
Quick Trick: Avoid 'unsafe-inline' to keep XSS protection active [OK]
Common Mistakes:
MISTAKES
  • Thinking it affects performance
  • Confusing with image loading
  • Assuming it breaks authentication

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Django Quizzes
Async Django - When async helps and when it does not - Quiz 9hard Celery and Background Tasks - Redis as message broker - Quiz 14medium DRF Advanced Features - Pagination (PageNumber, Cursor, Limit/Offset) - Quiz 14medium Deployment and Production - Nginx as reverse proxy - Quiz 8hard Deployment and Production - WhiteNoise for static files - Quiz 6medium Django REST Framework Basics - APIView for custom endpoints - Quiz 9hard Django REST Framework Basics - DRF installation and setup - Quiz 3easy Django REST Framework Basics - Generic views in DRF - Quiz 6medium Signals - pre_save and post_save signals - Quiz 6medium Testing Django Applications - Testing forms - Quiz 10hard