csp_sandbox.sjs (277B)
1 "use strict"; 2 3 function handleRequest(request, response) { 4 // sandbox without allow-same-origin forces an opaque origin (null principal). 5 response.setHeader("Content-Security-Policy", "sandbox", false); 6 response.write("This page has Content-Security-Policy: sandbox"); 7 }