A validator (including best practices) for content security policies