#!/usr/bin/env bash
# Fixture: borda antiga (CSP sem Trusted Types). O `security-check` deve reprovar no probe efetivo.
printf 'HTTP/1.1 200 OK\r\nContent-Security-Policy: default-src '\''self'\''; script-src '\''self'\''\r\n\r\n'