W3C

Last Call: Content Security Policy Level 2