/testing/web-platform/meta/content-security-policy/nonce-hiding/