W3C Content Security Policy

Content Security Policy 1.0 is a W3C recommendation for improving web security. It allows website owners to control resources loaded by the browser to help prevent cross-site scripting and other attacks. The policy uses HTTP headers to define whitelists of approved sources of scripts, stylesheets, fonts, frames, and other content. Reporting of policy violations can also help site owners identify v