Hiding JSON-formatted data in the DOM with CSP enabled

1 · Mathias Bynens · Aug. 26, 2013, 4:32 p.m.
If Content Security Policy is enabled for protection against cross-site scripting attacks (i.e. the unsafe-inline option is not set), the use of inline ...