Directory listing for /content-security-policy/script-src/tentative/
..
script-url-allowed-by-hash.https.html
support
url-hash-in-header-and-meta.https.html