This link appeared in WDRL 133 on .

GitHub’s CSP journey - GitHub Engineering

Github shares their journey through Content Security Policy. You can read it basically as an annotated changelog that contains all the errors they made and lessons they learned over time.