Content Security Policy Demo

this page itself is CSP valid

• external contents
• inline contents
• eval js
• iframe
• iframe sandbox
• navigate-to