This page sets two CSP headers:

X-Content-Security-Policy: sandbox

Content-Security-Policy: sandbox