CSP 1.0 Added to Firefox to Block XSS AttacksAfter years of discussion and waiting, Mozilla has finally added Content Security Policy 1.0, a defense against some common attacks such as XSS, to its Firefox browser. CSP already has been implemented in Google Chrome and Internet Explorer and there was a limited implementation of it in Firefox previously, beginning in 2011, but this is the first time the approved 1.0 specification has been implemented in Firefox.
Source:
CSP 1.0 Added to Firefox to Block XSS Attacks