Content Security Policy (http header to protect against XSS, etc)
developer.mozilla.org