[Solved] In a Django project, you wrote:response['Content-Security-Policy'] = "default-src 'self'"response['Content-Security-Policy'] = "script-src 'none'"What will be the effective CSP header in the response? | Django

Django - Security Best Practices

In a Django project, you wrote:

response['Content-Security-Policy'] = "default-src 'self'"
response['Content-Security-Policy'] = "script-src 'none'"

What will be the effective CSP header in the response?

A"default-src 'self'"

B"script-src 'none'"

C"default-src 'self'; script-src 'none'"

DNo CSP header will be set

Step-by-Step Solution

Solution:

Step 1: Understand header overwrite behavior
Setting the same header twice overwrites the previous value in Django response.
Step 2: Identify final header value
The last assignment "script-src 'none'" replaces the earlier "default-src 'self'".
Final Answer:
"script-src 'none'" -> Option B
Quick Check:
Last header assignment wins = "script-src 'none'" [OK]

Quick Trick: Last header assignment overwrites previous ones [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Django

9 interactive learning modes - each teaches the same concept differently

More Django Quizzes

In a Django project, you wrote: