content-security-policy/support/echo-policy.py

def main(request, response):
    policy = request.GET.first("policy");
    return [("Content-Type", "text/html"), ("Content-Security-Policy", policy)], "<!DOCTYPE html><title>Echo.</title>"