Author here. If you haven&#x27;t had the time to read the article, it isn&#x27;t a CSP howto. Rather it&#x27;s about the steps taken to implement CSP in enforcing mode on a production app:<p>- dealing with third party libraries<p>- replacing common unsafe techniques with better ones<p>- handling violation messages moe efficiently.<p>There&#x27;s also a small library with an implementation of policies for a bunch of common third part JS libraries, which should save a bunch of research.<p>I hope you find it useful.