<?php
    $policy = $_GET["policy"];
    $to = $_GET["to"] == "http" ? "http://127.0.0.1:8000" : "https://127.0.0.1:8443";
    header("Content-Security-Policy: referrer $policy");
?>
<!DOCTYPE html>
<html>
<head>
    <script>
        document.location = "<?php echo $to ?>/security/contentSecurityPolicy/resources/referrer-test-endpoint.php";
    </script>
</head>
</html>