“Google isn’t satisfied with securing Gmail itself from prying eyes; it’s blocking sinister add-ons, too. The email service now supports Content Security Policy, which prevents web extensions from running code that could bypass security or otherwise wreck your day.”