Content Security Policy can significantly reduce the risk and impact of cross-site scripting attacks in modern browsers.