<?php
header_remove();
header("Content-Security-Policy: default-src 'none'  ; frame-ancestors 'self' ; base-uri 'self' ; form-action 'self' ; block-all-mixed-content ;require-trusted-types-for 'script'")
?>
<!DOCTYPE html>
<html>
    <head>
        <title>CSP Example</title>
    </head>
    <body>
        <p>Page with an CSP highly secured.</p>
    </body>
</html>

