Programming is difficult — and difficult things generally don’t have a perfect solution. As an example, cross-site scripting (XSS) is still very much unsolved. It’s very easy to think you’re doing the right thing at the right time, but there are two opportunities to fail here: the fix might not be correct, and it might not be applied correctly. Escaping content (while still the most effective way
![CSP to the Rescue: Leveraging the Browser for Security](https://cdn-ak-scissors.b.st-hatena.com/image/square/a7dfbba80c1b2e3d08e53178d335285f8dc68548/height=288;version=1;width=512/https%3A%2F%2Fcdn.cms-twdigitalassets.com%2Fcontent%2Fdam%2Fblog-twitter%2Fengineering%2Fen_us%2Fmain-template-assets%2FEng_EXPLORE_Pink.png.twimg.768.png)