I've fleshed out the "CSP as compilation target" proposal at https://mikewest.github.io/artur-yes/ , tacking on and formalizing `X-XSS-Protection`. WDYT?
-
-
both are bad. Hence it might be good for older UAs to opt out, while still enthusiastically Artur-ing
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.