A better alternative would be to promote the use of Content-Security-Policy, perhaps by requiring it be used in order to load source material from an alternate

A better alternative would be to promote the use of Content-Security-Policy, perhaps by requiring it be used in order to load source material from an alternate domain.