chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/resources/csp.php

<?php
  header("Content-Security-Policy: ${_GET['csp']}");
?>
<!doctype html><title>Header!</title>