/testing/web-platform/meta/content-security-policy/default-src/