csp
reference corpus · status live · domain WEB (Web and frontend platform) · lane A · refresh pinned · tags GLOBAL · CSP · SECURITY · HEADERS · XSS · WEBAPPSEC
What an agent uses it for
An agent hardening a web surface queries this for Content Security Policy directive grammar, source-list matching and nonce/hash enforcement.
curl -fsSLO https://raw.githubusercontent.com/xerj-org/xerj/corpus-hub/tools/xerj-code/hub/csp.jsonxerj corpus add --from ./csp.jsonxerj corpus index csp then xerj code csp "your question"Needs the xerj CLI and a local node running; the copy prompt covers both, checks each step, and shows how to stop only the node you started. No shell: the MCP tool xerj_code_search with corpus: "csp", once the corpus is indexed on the node.
Sources and pins
| source | pin | licence | size | review note |
|---|---|---|---|---|
| webappsec-csp | b1bad631b091 | W3C-20150513 | 3.9 MB / 52 files | licence host-verified (ok-text): W3C-20150513 |
3.9 MB across 52 files. Added 2026-10-13.
Rights
W3C-20150513. Redistribution permitted with attribution per the licence review. The review block records a human opening each licence file at the pin. Detector output is a hint, never the verdict.
Retrieval spot-check (G7)
Not yet spot-checked. Queries are pre-registered in the registry before grading.