How to Ensure Your CSP is Effective Against XSS Attacks