Variable DOCUMENT_CONTENT_SECURITY_POLICY`Const`

DOCUMENT_CONTENT_SECURITY_POLICY: "default-src 'none'; style-src 'unsafe-inline'; sandbox"

Sent on every answer. A response opened as a page of its own runs no script, loads nothing and is sandboxed into an opaque origin, so no byte of a document can act on the dashboard's origin.