On the Insecurity of Whitelists and the Future of Content Security Policy [pdf]static.googleusercontent.com9 pointsokket10 years ago