I find it interesting that XSS has been in the top 5 since the first Top 25 to include a table with ranks in 2010 (archive: https://cwe.mitre.org/top25/archive/

I find it interesting that XSS has been in the top 5 since the first Top 25 to include a table with ranks in 2010 (archive: https://cwe.mitre.org/top25/archive/ https://cwe.mitre.org/top25/archive/). I know Content Security Policy can help mitigate XSS, but I wonder if there are any existing tools to help you discover what kind of rules your website would need currently to even function as intended?