1. mitigating attacks with content security policy