Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild
Noncespaces: Using randomization to defeat cross-site scripting attacks