Content Security Problems?: Evaluating the Effectiveness of Content Security Policy in the Wild
You are what you include: large-scale evaluation of remote javascript inclusions