1
Is CSP enforced only during initial rendering? Meaning there is no continuous coverage after your document loads.
Here is an example of what I'm talking about:
Let's say your page, example.com, has some js that takes the url parameter "name" if it exists and renders it on the page:
$(document)...