4 ms·

CSP can be set through HTTP header, so a site with an explicit CSP configuration might allow this.