https://w3c.github.io/webappsec-cspee/ https://en.wikipedia.org/wiki/Content_Security_Policy https://en.wikipedia.org/wiki/Clickjacking