Protecting Website with CSP

CSP : Content Security Policy

When your website starts serving to the world, it becomes a potential target for hackers. You might want to allow URLs only from your website to prevent cross-site attacks.

Modern browsers allow websites to announce a header called “Content-Security-Policy” (CSP). You can specify which sites are allowed in this header, and browsers will block resources from any sites not in your CSP, treating them as cross-site attacks.

Finding a Login Protection Solution

For any website, robust login protection is crucial. Existing solutions often fall short of my requirements:

1. Security
2. Dynamic capability
3. Resistance to brute force attacks

I analyzed many options and initially considered Aerospike and ScyllaDB as ideal solutions. However, I abandoned these ideas because they proved too difficult to compile from source on standard Linux systems. I attempted builds on both Debian and Alpine with no success.

Because of we need to sync the timer of linux server.. The system provided service is too active to try to connect unknow server, so, write a C prog to do it..

1
2
3
4
5
6

void print_usage(const char *program_name) {
    printf("Usage: %s [OPTIONS]\n", program_name);
    printf("Options:\n");
    printf("  -d, --debug    Enable debug output\n");
    printf("  -h, --help     Display this help message\n");
}

You can use ‘-h/–help’ to print the help info.