Comment Comment by bangaladore CSP is inherently a client-side browser security feature, so yes. parent bangaladore 9 months ago