Dynamic source values for content security policies

One or more computer storage media storing computer-useable instructions that, when used by a computing device, cause the computing device to perform operations, the operations comprising:

• receiving a request for a web application;
• retrieving, from a repository of content security policy (CSP) definitions, a first CSP definition corresponding to the requested web application, the CSP definition including a dynamic source value;
• generating a CSP header based on the CSP definition, the CSP header including a source value dynamically generated based on the dynamic source value and a domain associated with the requested web application;
• and
• providing the CSP header as a response header for the requested web application.

A computer system comprising:

• one or more processors;
• and
• one or more computer storage media storing computer-useable instructions that, when used by the one or more processors, causes the one or more processors to perform operations comprising:
• receiving a request for a web application;
• retrieving, from a repository of content security policy (CSP) definitions, a first CSP definition corresponding to the requested web application, the CSP definition including a dynamic source value;
• generating a CSP header based on the CSP definition, the CSP header including a source value dynamically generated based on the dynamic source value and a domain associated with the requested web application;
• and
• providing the CSP header as a response header for the requested web application.