CSP wont help you if you authorize scripts with a source of self or if the malicious script contains a relative "src" attribute. This approach has the added be

CSP wont help you if you authorize scripts with a source of self or if the malicious script contains a relative "src" attribute. This approach has the added benefit of letting you know that malicious things are happening.