Content Security Policy is really coming – no joke – this is a huge browser security game changer. There is so much potential, assuming it all works. Life would be so much easier is this became real. Read about it for yourself!

http://blog.mozilla.com/security/2009/06/19/shutting-down-xss-with-content-security-policy/