Re: CSP - Prevent DOM XSS only?

On 10 December 2012 20:44, Eduardo' Vela <evn@google.com> wrote:

> Well, mostly because we can define this as a policy to a large set of
> products without having to include a large JS file rather than a hack with
> the JS environment :)
>

Who said the js file has to be large :P this is what hacking is for.