Over the past three years, I have integrated Application Security (AppSec) practices into my development process. This brief overview covers key concepts I have learned and how anyone can implement them in their organization with minimal resources.

It has been a couple of weeks since Advent of Cyber 2022 ended. However, I still wanted to write a short review of my experience as a first-timer and the challenges that I enjoyed the most. Overall, a great learning, hands-on, and beginner-friendly experience covering multiple areas of cybersecurity.

Setting up the Content-Security-Policy (CSP) requires a fine-tuned configuration to allow or block the loading of resources. Here, I cover my approach to set my CSP and the reasoning behind some of my choices.

GitHub Pages offers free hosting for static sites; however, it doesn't provide any way to control the HTTP headers. This limitation directly affects multiple configuration options, and opens the door to potential vulnerabilities. With that in mind, I decided to work around it and add extra security to my website by using Cloudflare’s to control my HTTP Security Headers.