#!/usr/bin/env python3

import sys

sys.stdout.write(
    'Content-Security-Policy: img-src \'none\'; report-uri /security/contentSecurityPolicy/resources/save-report.py\r\n'
    'Content-Type: text/html\r\n\r\n'
    '<!DOCTYPE html>\n'
    '<html>\n'
    '<body>\n'
    '<script>\n'
    '    var xhr = new XMLHttpRequest();\n'
    '    xhr.open("GET", "/cookies/resources/setCookies.cgi", false);\n'
    '    xhr.setRequestHeader("SET-COOKIE", "hello=world;path=/");\n'
    '    xhr.send(null);\n'
    '</script>\n'
    '\n'
    '<!-- This image will generate a CSP violation report. -->\n'
    '<img src="/security/resources/abe.png">\n'
    '\n'
    '<script src="resources/go-to-echo-report.js"></script>\n'
    '</body>\n'
    '</html>\n'
)