gecko/testing/web-platform/meta/content-security-policy
..
generic
object-src
script-src
style-src