CSP: Note that report-only is not supported via <meta>.

Fixes #21.
CSP: Improve the report-only example text.

Fixes #23.
CSP: Note the <meta> delivery mechanism in the intro.

Fixes #24.
CSP: Add a <meta> example.
CSP: Adding some examples, cleaning up typos.
Kicking it off.
mixed
Be idealistic about plugins.
SVG images are "optionally blockable passive content".
mixed
mixed
mixed
mixed
mixed
Call out 'data integrity' explicitly in the intro.
Be more explicit about the dangers of XHR, et al.
Rephrased the risks bit of the iframe note.
Missed an important word when reporting on claims of 43% breakage.
Images are dangerous.
Rebuilding HTML.