MDN URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

What information was incorrect, unhelpful, or incomplete?

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribute malware.

Should read "to distributing malware" at the end?