Text this: Automatic generation of content security policy to mitigate cross site scripting