Content-Security-Policy: sandbox {{GET[sandbox]}};