Content Security Policy Demo

this page itself is CSP valid