www.secure.nu
Home
Privacy
Content-Security-Policy: img-src 'self'
This will try to load local image.
(You should see Edument logo)
This will try to load remote image.
(You shouldn't see Google logo, as remote images are forbidden)