This page embeds sandbox.html in an iframe. The iframe receives the poisoned sandbox CSP header from extension_protocols.cc, and the \f parser differential gives it a non-opaque chrome-extension:// origin.