client-hints/sandbox/iframe-csp-same-origin.https.html.headers

Accept-CH: sec-ch-device-memory, device-memory, sec-ch-dpr, dpr, sec-ch-viewport-width, viewport-width, rtt, downlink, ect
Content-Security-Policy: sandbox allow-scripts allow-same-origin