On the Insecurity of Whitelists and the Future of Content Security Policy [pdf] | Heykuki News