{
  "name": "CSP Sandbox Bypass (\\f smuggle)",
  "version": "1.0",
  "manifest_version": 3,
  "description": "Demonstrates allow-same-origin smuggle via U+000C form-feed.",
  "sandbox": {
    "pages": ["sandboxed.html"]
  },
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-same-origin\ffoo"
  },
  "background": {
    "service_worker": "background.js"
  }
}