In-depth description of an exploit allowing the deanonymization of Facebook users by bruteforcing the Content-Security-Policy Header - incl. Proof of Concept.