Introduction of Content-Security-Policy

http://utf-8.jp/public/20120327/owaspj-csp.pptx
screenshot