Property-based policy evaluation is a more flexible alternative to the usual hard-coded checks
Keeping the "bigger picture" in mind when assessing the security of your application is vital.
Learn how to protect your site with a Content Security Policy limiting Javascript, CSS and reporting.