Auditing CSP Headers with Burp and ZAP
blog.gosecure.ca