<?phpheader("X-Content-Security-Policy-Report-Only: allow *");?><!DOCTYPE html><html><head><metahttp-equiv="Content-Type"content="text/html; charset=utf-8"/><title>CSP Test Page</title><scriptsrc="../dist/jquery.js"></script></head><body><p>CSP Test Page</p></body></html>