On the Insecurity of Whitelists and the Future of Content Security Policy | Heykuki News