On the Insecurity of Whitelists and the Future of Content Security Policy [pdf]static.googleusercontent.com33 pointsnsgi10 years ago