def main(request, response): csp = request.GET.first(b"policy") headers = [ (b"Content-Type", b"text/html"), (b"Content-Security-Policy", csp) ] body = f"""
{csp}