Content-Security-Policy: {{GET[policy]}}