CSP to the Rescue: Leveraging the Browser for Security