What Content Security Policy does
Content Security Policy, usually called CSP, is an HTTP response header that tells browsers which sources are allowed to provide scripts, styles, images, frames, and other resources. A carefully configured policy can reduce the impact of some cross-site scripting and content-injection attacks.
Why an SEO-style audit may mention security headers
Security is not the same thing as rankings, but trustworthy websites should be maintained responsibly. Technical audits often include security and browser-policy checks because they reveal aspects of implementation quality and risk management.
Do not deploy a strict policy blindly
A poorly configured CSP can break analytics, checkout scripts, fonts, embeds, advertising, and site functionality. Start by inventorying required resources and testing carefully. Many teams use report-only mode first so violations can be observed without blocking content.
\n\n
Work with your platform
WordPress sites may load resources from themes, plugins, payment providers, analytics services, and CDNs. Build the policy around the resources the site actually needs. After major plugin changes, retest the policy.