MIX: Block private resources from public resources.
[MIX]: Renaming origin types for clarity.
CSP: Add a non-normative description of what policy applies to what resource in what context.
CSP: Organizing the table. h/t annevk.
CSP: Drop RFC2616 in favor of RFC7230 and RFC7231.
MIX: Clarifying 'weakly TLS-protected'.
CSP: Allow <meta> to tighten existing policy.
CSP: Block redirects by default, introduce 'unsafe-redirect'.