/testing/web-platform/meta/referrer-policy/origin-when-cross-origin/meta-csp/