[1] script-src explanations. · w3c/webappsec-csp@c23d6e8 ( 版) <https://github.com/w3c/webappsec-csp/commit/c23d6e892be4c105c8e69541502e26e199a29366>
[2] Typo: 'style-src' should govern 'style-attribute'. · w3c/webappsec-csp@96f37a9 ( 版) <https://github.com/w3c/webappsec-csp/commit/96f37a90276126cb2ad5dbe845585dc3655473ce>
[3] Close #384: add CSP hooks to handle inline events and style · whatwg/html@920c918 ( 版) <https://github.com/whatwg/html/commit/920c9183a7990968ecac1aeedae22391f3438791>
[4] Added new directives for more granular script and style policies (#325) (andypaicu著, ) <https://github.com/w3c/webappsec-csp/commit/3ff48504a825497488802db3b3d0e677bc88629a>
[5] Added new directives for more granular script and style policies by andypaicu · Pull Request #325 · w3c/webappsec-csp () <https://github.com/w3c/webappsec-csp/pull/325>