CSP Test Page
Check the response headers in devtools to see the Content-Security-Policy.