Personal draft of the Web Application Security WG's Content Security Policy specification.