Reject the Unexpected – Content Security Policy in Gmail
gmailblog.blogspot.com