content-security-policy/support/resource.py

def main(request, response):
    headers = []
    headers.append((b"Access-Control-Allow-Origin", b"*"))

    return headers, b"{ \"result\": \"success\" }"