Describir: CSS analyses in security policy