gecko-dev/testing/web-platform/tests/fetch/api/policies/csp-blocked.js.headers

Content-Security-Policy: connect-src 'none';