Handy Firefox/Chrome extension that shows the CSP policy and offers suggestions for locking it down. github.com/craigfrancis/dev-…