Solutions to Google's XSS game, a patched re-implementation in Python Flask, and some thoughts on defending with Content Security Policy.
