On the Insecurity of Whitelists and the Future of Content Security Policyresearch.google.com71 pointsmmastrac10 years ago