coates’s Twitter Archive—№ 13,689

Yes “CSP is about [preventing] exploiting holes, not about website owners stopping users from doing what they want.” bugzilla.mozilla.org/show_bug.cgi?id=866522