chromium/third_party/blink/web_tests/external/wpt/service-workers/service-worker/resources/fetch-csp-iframe.html.sub.headers

Content-Security-Policy: img-src https://{{host}}:{{ports[https][0]}}; connect-src 'unsafe-inline' 'self'