Script src directive of the content security policy July 8, 2019 16 32 64 128 Because it does not appear in the script src directive of the content security policy Content spoofing poc What is strict mode in javascript Cross site scripting explained Cross site scripting attack