/testing/web-platform/meta/content-security-policy/script-src/hash-always-converted-to-utf-8/