A Measurement Study of the Content Security Policy on Real-World Applications
Defeating script injection attacks with browser-enforced embedded policies