CSP2: https://w3c.github.io/webappsec/specs/content-security-policy/ Mixed Content: https://w3c.github.io/webappsec/specs/mixedcontent/ Referrer Policy: https://w3c.github.io/webappsec/specs/referrer-policy/ Subresource Integrity: https://w3c.github.io/webappsec/specs/subresourceintegrity/