www2
Content Security Policy is best used as defense-in-depth, to reduce the harm caused by content injection attacks.
The DOCTYPE is a required preamble for HTML5 websites.