Self-healing content security policies

One or more computer storage media storing computer-useable instructions that, when used by a computing device, cause the computing device to perform operations, the operations comprising:

• receiving content security policy (CSP) violation information identifying a CSP violation for a CSP header and a violating source for the CSP violation;
• comparing the violating source for the CSP violation to a list of trusted sources;
• identifying a first trusted source in the list of trusted sources matching the violating source for the CSP violation;
• and
• responsive to identifying the first trusted source as matching the violating source, causing a CSP definition associated with the CSP header to include a source value based on the violating source or the first trusted source to provide an updated CSP definition.

A computer system comprising:

• one or more processors;
• and
• one or more computer storage media storing computer-useable instructions that, when used by the one or more processors, causes the one or more processors to perform operations comprising:
• receiving content security policy (CSP) violation information identifying a CSP violation for a CSP header and a violating source for the CSP violation;
• comparing the violating source for the CSP violation to a list of trusted sources;
• identifying a first trusted source in the list of trusted sources matching the violating source for the CSP violation;
• and
• responsive to identifying the first trusted source as matching the violating source, causing a CSP definition associated with the CSP header to include a source value based on the violating source or the first trusted source to provide an updated CSP definition.