Content-Security-Policy:
report-to csp-endpoint;
frame-ancestors 'self';
object-src 'none';
form-action 'self' *.varhol.net;
In-Line Javascript:
External 'Self' Javascript:
Externally Hosted Javascript:
Inline Style: This is red
'Self' Form Processor:
Externally Hosted Form Processor: