gecko-dev/browser/base/content/test/protectionsUI/sandboxed.html^headers^

Content-Security-Policy: sandbox allow-scripts;