def main(request, response): policy = request.GET.first("policy"); return [("Content-Type", "text/html"), ("Content-Security-Policy", policy)], "Echo."