{
  "name": "CSP Sandbox Control (should be REJECTED)",
  "version": "1.0",
  "manifest_version": 3,
  "description": "Control: plain allow-same-origin token, should fail validation.",
  "sandbox": {
    "pages": ["sandboxed.html"]
  },
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-same-origin"
  }
}