gecko-dev/testing/web-platform/tests/.well-known/origin-policy/policy-csp-2

{
  "content-security-policy": [{
    "policy": "script-src 'self' 'nonce-test'"
  }]
}