gecko-dev/dom/security/test/csp/file_bug886164_6.html^headers^

Content-Security-Policy: default-src 'self' 'unsafe-inline';