discourse/spec/lib/content_security_policy
..
builder_spec.rb