Introduction: Content Security Policy (CSP) is a good safety net against Cross Site Scripting (XSS). In fact, its the best one and I would recommend it to anyone building new sites. For existing sites, implementing CSP can be a challenge & Continue reading

https://blog.mozilla.org/security/2014/10/04/csp-for-the-web-we-have/