On: Facebook using Content Security Policy headers for Webkit.

[jdavid]

For the less informed CSPs are a new web tool to help websites defend against cross site scripting.

Here is a definition of the spec, although this is only implemented for chrome, and safari. http://people.mozilla.org/~bsterne/content-security-policy/d...