GitHub’s CSP journey

An excellent in-depth analysis of GitHub’s current Content Security Policy including the issues they encountered and lessons they learned.