<meta http-equiv="Content-Security-Policy" content="frame-src 127.0.0.1:8000">
<script src="resources/dump-as-text.js"></script>
<iframe src="/resources/redirect.php?url=http://localhost:8000/security/contentSecurityPolicy/resources/alert-fail.html"></iframe>