<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="script-src http://localhost:8000">
<link id="target" rel="import" href="http://localhost:8000/htmlimports/resources/child-having-domain-policy.cgi">
</head>
<body>
<script src="http://localhost:8000/htmlimports/resources/csp-import-block-but-domain.js"></script>
</body>
</html>