/testing/web-platform/meta/referrer-policy/origin-when-cross-origin/http-csp/