/testing/web-platform/meta/content-security-policy/blob/