• Skip to main content
  • Skip to search
  • Skip to select language
MDN Web Docs
  • References
    • Overview / Web Technology

      Web technology reference for developers

    • HTML

      Structure of content on the web

    • CSS

      Code used to describe document style

    • JavaScript

      General-purpose scripting language

    • HTTP

      Protocol for transmitting web resources

    • Web APIs

      Interfaces for building web applications

    • Web Extensions

      Developing extensions for web browsers

    • Accessibility

      Build web projects usable for all

    • Web Technology

      Web technology reference for developers

  • Learn
    • Overview / MDN Learning Area

      Learn web development

    • MDN Learning Area

      Learn web development

    • HTML

      Learn to structure web content with HTML

    • CSS

      Learn to style content using CSS

    • JavaScript

      Learn to run scripts in the browser

    • Accessibility

      Learn to make the web accessible to all

  • Plus
    • Overview

      A customized MDN experience

    • AI Help

      Get real-time assistance and support

    • Updates

      All browser compatibility updates at a glance

    • Documentation

      Learn how to use MDN Plus

    • FAQ

      Frequently asked questions about MDN Plus

  • Curriculum New
  • Blog
    • Playground

      Write, test and share your code

    • HTTP Observatory

      Scan a website for free

    • AI Help

      Get real-time assistance and support

  • Log in
  • Sign up for free
  1. 術語表
  2. CSP
    • English (US)
    • Deutsch
    • Français
    • 日本語
    • 한국어
    • Русский
    • 中文 (简体)

此頁面由社群從英文翻譯而來。了解更多並加入 MDN Web Docs 社群。

在本文中

  • 了解更多
  1. Glossary
    1. 抽象化
    2. Accent
    3. Accessibility
    4. Accessibility tree
    5. Accessible description
    6. Accessible name
    7. Adobe Flash
    8. Advance measure
    9. AJAX
    10. 演算法
    11. Alignment container
    12. Alignment subject
    13. Alpha (alpha channel)
    14. ALPN
    15. API
    16. Apple Safari
    17. Application context
    18. 引數
    19. ARIA
    20. ARPA
    21. Arpanet
    22. 陣列
    23. ASCII
    24. Aspect ratio
    25. Asynchronous 非同步
    26. ATAG
    27. 屬性
    28. Authentication
    29. Authenticator
    30. Bandwidth
    31. Base64
    32. Baseline
      1. Baseline (compatibility)
      2. Baseline (typography)
    33. BCP 47 language tag
    34. Beacon
    35. Bézier curve
    36. bfcache
    37. BiDi
    38. BigInt
    39. Binding
    40. Bitwise flags
    41. Blink
    42. blink element (<blink> tag)
    43. Block
      1. 區塊 (CSS)
      2. Block (scripting)
    44. Block cipher mode of operation
    45. 區塊級元素
    46. 布林
      1. Boolean (JavaScript)
      2. Boolean attribute (ARIA)
      3. Boolean attribute (HTML)
    47. Bounding Box
    48. Breadcrumb
    49. Brotli compression
    50. 瀏覽器
    51. 瀏覽上下文
    52. 緩衝區
    53. Bun
    54. Cache 快取
    55. 可緩存
    56. CalDAV
    57. Call stack
    58. 回呼函式
    59. Camel case
    60. Canonical order
    61. Canvas
    62. Card sorting
    63. CardDAV
    64. Caret
    65. CDN
    66. Certificate authority
    67. Certified
    68. Challenge-response authentication
    69. 字元
    70. 字元編碼
    71. Character reference
    72. 字符集
    73. Chrome
    74. CIA
    75. Cipher
    76. 密碼套件
    77. 密文
    78. Class（類）
    79. Client-side rendering (CSR)
    80. 閉包
    81. Cloud
    82. Cloud computing
    83. 內容管理系統（CMS）
    84. Code point
    85. Code splitting
    86. Code unit
    87. Codec
    88. Color space
    89. Color wheel
    90. 編譯
    91. 編譯時間
    92. Composite operation
    93. Compression Dictionary Transport
    94. Computer Programming
    95. Conditional
    96. Constant
    97. 建構子
    98. Content header
    99. Continuous Media
    100. Control flow
    101. Cookie
    102. Copyleft
    103. CORS
    104. CORS-safelisted request header
    105. CORS-safelisted response header
    106. Crawler
    107. Credential
    108. CRLF
    109. Cross Axis
    110. CSRF
    111. Cross-site scripting (XSS)
    112. CRUD
    113. Cryptanalysis
    114. 密碼學
    115. CSP
    116. CSS
    117. CSS 物件模型 (CSSOM)
    118. CSS 像素
    119. CSS 預處理器
    120. Cumulative Layout Shift (CLS)
    121. 資料結構
    122. Database
    123. Debounce
    124. Decryption
    125. Deep copy
    126. Delta
    127. 阻斷服務（DoS）
    128. Deno
    129. Descriptor (CSS)
    130. Deserialization
    131. 開發者工具
    132. Device pixel
    133. Digital certificate
    134. Digital signature
    135. Distributed Denial of Service (DDoS)
    136. DMZ
    137. DNS
    138. Doctype
    139. Document directive
    140. Document environment
    141. DOM
    142. 域
    143. 域名
    144. Domain sharding
    145. Dominator
    146. DSL
      1. DSL (Digital Subscriber Line)
      2. DSL (Domain-Specific Language)
    147. DTLS (Datagram Transport Layer Security)
    148. DTMF (Dual-Tone Multi-Frequency signaling)
    149. Dynamic typing
    150. ECMA
    151. ECMAScript
    152. Effective connection type
    153. 元素
    154. Encapsulation
    155. Encryption
    156. Endianness
    157. Engine
      1. JavaScript engine
      2. Rendering engine
    158. Entity
    159. Entity header
    160. Enumerated
    161. Escape character
    162. eTLD
    163. 事件
    164. Exception
    165. EXIF
    166. Expando
    167. Fallback alignment
    168. Falsy
    169. Favicon
    170. Federated identity
    171. Fetch directive
    172. Fetch metadata request header
    173. Fingerprinting
    174. Firefox OS
    175. 防火墻
    176. 首次內容繪製
    177. 首次 CPU 閒置
    178. 首次輸入延遲 已棄用
    179. First Meaningful Paint (FMP)
    180. First Paint (FP)
    181. 一級函式（First-class Function）
    182. Flex
    183. Flex Container
    184. Flex Item
    185. Flexbox
    186. Flow relative values
    187. Forbidden request header
    188. Forbidden response header name
    189. Fork
    190. Fragmentainer
    191. Frame rate (FPS)
    192. FTP
    193. FTU
    194. Function
    195. Fuzz testing
    196. Gamut
    197. Garbage collection
    198. Gecko
    199. General header
    200. GIF
    201. Git
    202. Global object
    203. Global scope
    204. Global variable
    205. Glyph
    206. Google Chrome
    207. GPL
    208. GPU
    209. Graceful degradation
    210. Grid
    211. Grid Areas
    212. Grid Axis
    213. Grid Cell
    214. Grid Column
    215. Grid container
    216. Grid Lines
    217. Grid Row
    218. Grid Tracks
    219. Guaranteed-invalid value
    220. Gutters
    221. gzip compression
    222. 散列函式
    223. Hash routing
    224. Head
    225. High-level programming language
    226. HMAC
    227. 提升（Hoisting）
    228. HOL blocking
    229. 主機
    230. Hotlink
    231. Houdini
    232. HPKP
    233. HSTS
    234. HTML
    235. HTML color codes
    236. HTML5
    237. HTTP
    238. HTTP Content
    239. HTTP header
    240. HTTP/2
    241. HTTP/3
    242. HTTPS
    243. HTTPS RR
    244. Hyperlink
    245. Hypertext
    246. IANA
    247. ICANN
    248. ICE
    249. IDE
    250. Idempotent
    251. 識別字
    252. Identity provider (IdP)
    253. IDL
    254. IETF
    255. IIFE
    256. IMAP
    257. Immutable
    258. IndexedDB
    259. Information architecture
    260. Inheritance
    261. Ink overflow
    262. Inline-level content
    263. Input method editor
    264. Inset properties
    265. Instance
    266. Interaction to Next Paint (INP)
    267. Internationalization (i18n)
    268. Internet
    269. Interpolation
    270. Intrinsic size
    271. Invariant
    272. IP 位址
    273. IPv4
    274. IPv6
    275. IRC
    276. ISO
    277. ISP
    278. ITU
    279. Jank
    280. Java
    281. JavaScript
    282. Jitter
    283. JPEG
    284. JSON
    285. JSON type representation
    286. Just-In-Time Compilation (JIT)
    287. Kebab case
    288. Key
    289. 關鍵詞
    290. Largest Contentful Paint (LCP)
    291. Latency
    292. Layout mode
    293. Layout viewport
    294. Lazy load
    295. Leading
    296. LGPL
    297. Ligature
    298. Literal
    299. Local scope
    300. Local variable
    301. Locale
    302. 在地化
    303. Logical properties
    304. Long task
    305. Loop
    306. Lossless compression
    307. Lossy compression
    308. LTR (Left To Right)
    309. Main Axis
    310. Main thread
    311. Markup
    312. MathML
    313. Media
      1. Media (Audio-visual presentation)
      2. Media (CSS)
    314. Media query
    315. Metadata
    316. Method
    317. Microsoft Edge
    318. Microsoft Internet Explorer
    319. Middleware
    320. MIME
    321. MIME type
    322. Minification
    323. MitM
    324. Mixin
    325. Mobile First
    326. Modem
    327. Modularity
    328. Mozilla Firefox
    329. Mutable
    330. MVC
    331. Namespace
    332. NaN
    333. NAT
    334. Native
    335. Navigation directive
    336. Netscape Navigator
    337. Network throttling
    338. NNTP
    339. Node
      1. Node (DOM)
      2. Node (networking)
    340. Node.js
    341. Non-normative
    342. Normative
    343. Null
    344. Nullish value
    345. Number
    346. 物件
    347. Object reference
    348. 物件導向程式設計
    349. OpenGL
    350. OpenSSL
    351. Opera 瀏覽器
    352. Operand
    353. Operator
    354. Origin
    355. OTA
    356. OWASP
    357. P2P
    358. PAC
    359. Packet
    360. Page load time
    361. Page prediction
    362. 參數
    363. Parent object
    364. Parse
    365. Parser
    366. Payload body
    367. Payload header
    368. PDF
    369. Perceived performance
    370. Percent-encoding
    371. PHP
    372. Physical properties
    373. Pixel
    374. Placeholder names
    375. Plaintext
    376. Plugin
    377. PNG
    378. Polyfill
    379. Polymorphism
    380. POP3
    381. 通訊埠
    382. 預先取回連結
    383. Preflight request
    384. Prerender
    385. Presto
    386. Primitive
    387. Privileged
    388. Privileged code
    389. 漸進增強
    390. Progressive web apps
    391. Promise
    392. 屬性
      1. Property (CSS)
      2. Property (JavaScript)
    393. 通訊協定
    394. 原型
    395. Prototype-based programming
    396. Proxy server
    397. Pseudo-class
    398. 偽元素
    399. Pseudocode
    400. Public-key cryptography
    401. Python
    402. Quality values
    403. Quaternion
    404. QUIC
    405. RAIL
    406. Random Number Generator
    407. Raster image
    408. Rate limit
    409. RDF
    410. Reading order
    411. Real User Monitoring (RUM)
    412. 遞迴
    413. Reflow
    414. 正規表示式
    415. Relying party
    416. Render-blocking
    417. Repaint
    418. Replaced elements
    419. Replay attack
    420. Repo
    421. Reporting directive
    422. Representation header
    423. Request header
    424. Resource Timing
    425. Response header
    426. 響應式網頁設計
    427. REST
    428. RGB
    429. RIL
    430. Robots.txt
    431. Round Trip Time (RTT)
    432. Routers
    433. RSS
    434. Rsync
    435. RTCP (RTP Control Protocol)
    436. RTF
    437. RTL (Right to Left)
    438. RTP (Real-time Transport Protocol) and SRTP (Secure RTP)
    439. RTSP: Real-time streaming protocol
    440. Ruby
    441. Safe
      1. Safe (HTTP Methods)
    442. Salt
    443. Same-origin policy
    444. SCM
    445. Scope
    446. Screen reader
    447. Script-supporting element
    448. Scroll boundary
    449. Scroll chaining
    450. Scroll container
    451. Scroll snap
    452. SCTP
    453. SDK (Software Development Kit)
    454. SDP
    455. Search engine
    456. Secure Context
    457. Secure Sockets Layer (SSL)
    458. CSS 選擇器
    459. Semantics
    460. SEO
    461. Serializable object
    462. Serialization
    463. 伺服器
    464. Server Timing
    465. Server-side rendering (SSR)
    466. Session Hijacking
    467. SGML
    468. Shadow tree
    469. Shallow copy
    470. Shim
    471. Signature
      1. Signature (functions)
      2. Signature (security)
    472. SIMD
    473. SISD
    474. Site
    475. Site map
    476. SLD
    477. Sloppy mode
    478. Slug
    479. Smoke Test
    480. SMPTE (Society of Motion Picture and Television Engineers)
    481. SMTP
    482. Snake case
    483. Snap positions
    484. SOAP
    485. Source map
    486. SPA
    487. Specification
    488. Speculative parsing
    489. Speed index
    490. SQL
    491. SQL 注入
    492. SRI
    493. Stacking context
    494. State machine
    495. Statement
    496. Static method
    497. Static site generator (SSG)
    498. Static typing
    499. Sticky activation
    500. Strict mode
    501. String
    502. Stringifier
    503. STUN
    504. Style origin
    505. Stylesheet
    506. Submit button
    507. SVG
    508. SVN
    509. Symbol
    510. Symmetric-key cryptography
    511. 同步
    512. Syntax
    513. Syntax error
    514. Synthetic monitoring
    515. Table grid box
    516. Table Wrapper Box
    517. Tag
    518. TCP
    519. TCP handshake
    520. TCP slow start
    521. Telnet
    522. Texel
    523. The Khronos Group
    524. Thread
    525. Three js
    526. Throttle
    527. Time to first byte
    528. Time to interactive
    529. TLD
    530. TOFU
    531. Top layer
    532. Transient activation
    533. Transport Layer Security (TLS)
    534. Tree shaking
    535. Trident
    536. Truthy
    537. TTL
    538. TURN
    539. 型別
    540. Type coercion
    541. Type conversion
    542. TypeScript
    543. UAAG
    544. UDP (User Datagram Protocol)
    545. UI
    546. Undefined
    547. Unicode
    548. Unix time
    549. URI
    550. URL
    551. URN
    552. Usenet
    553. User agent
    554. UTF-8
    555. UTF-16
    556. UUID
    557. UX
    558. Validator
    559. Value
    560. Variable
    561. Vendor Prefix
    562. Viewport
    563. Visual Viewport
    564. Empty element
    565. VoIP
    566. W3C
    567. WAI
    568. WCAG
    569. Web performance
    570. Web server
    571. Web standards
    572. WebAssembly
    573. WebDAV
    574. WebExtensions
    575. WebGL
    576. WebIDL
    577. WebKit
    578. WebM
    579. WebP
    580. WebRTC
    581. WebSockets
    582. WebVTT
    583. WHATWG
    584. Whitespace
    585. WindowProxy
    586. World Wide Web
    587. Wrapper
    588. XForms 已棄用
    589. XHTML
    590. XInclude
    591. XLink
    592. XML
    593. XMLHttpRequest (XHR)
    594. XPath
    595. XQuery
    596. XSLT
    597. Zstandard compression

在本文中

  • 了解更多

CSP

CSP (内容安全策略)是被用於檢測和緩解某些網站相關的攻擊類型如XSS 和資料注入。

這個策略的履行是基於 HTTP 頭部的 Content-Security-Policy.

了解更多

基礎知識

  • 維基百科上的内容安全策略

技術資訊

  • MDN 上的内容安全策略文檔

Help improve MDN

Learn how to contribute.

This page was last modified on 2025年3月14日 by MDN contributors.

View this page on GitHub • Report a problem with this content
MDN logo

Your blueprint for a better internet.

  • MDN on Bluesky
  • MDN on Mastodon
  • MDN on X (formerly Twitter)
  • MDN on GitHub
  • MDN Blog RSS Feed

MDN

  • About
  • Blog
  • Careers
  • Advertise with us

Support

  • Product help
  • Report an issue

Our communities

  • MDN Community
  • MDN Forum
  • MDN Chat

Developers

  • Web Technologies
  • Learn Web Development
  • MDN Plus
  • Hacks Blog
  • Website Privacy Notice
  • Cookies
  • Legal
  • Community Participation Guidelines

Visit Mozilla Corporation’s not-for-profit parent, the Mozilla Foundation.
Portions of this content are ©1998–2025 by individual mozilla.org contributors. Content available under a Creative Commons license.