Last updated 1 year ago
https://devco.re/blog/2014/04/08/security-issues-of-http-headers-2-content-security-policy/
https://blog.davidh83110.com/%E8%B3%87%E8%A8%8A%E5%AE%89%E5%85%A8/%E9%A7%AD%E5%AE%A2%E6%8A%80%E8%A1%93/owasp%20top10/2016/10/10/xss.html