Content Security Policy checker

Reads the Content-Security-Policy off the response and judges what it actually restricts, rather than whether one was sent.

Part of security and privacy: what does the site hand to a browser, and to whom? In the grid, its column is headed “CSP”.