CSP

The six response headers that close common browser-side attacks, how to add them at nginx, and how to write a CSP that does not break your site.