Re: [Content Security Policy] Proposal to move the debate forward

Ok I've thought about this, IMO here is what you need:-

1) Policy editor. A online/offline editor to create policy scripts with a
nice UI.
2) Validator. You need to validate policies, so we know what they are doing
instead of thinking we know what they're doing. Should CSP refuse to load
sites with invalid policies or syntax errors? I think yes.
3) English translator. It will read the policy you have created and tell you
in plain English what it does.

Then I don't mind what syntax you have and I don't have to understand it :)