Content Security Policy Mitigates XSS, Breaks WebsitesAn easily available and stout defense against cross-site scripting - content security policy - is sparsely deployed because it is not compatible with most websites.
Source:
Content Security Policy Mitigates XSS, Breaks Websites