Hi,
https://content-security-policy.com/
The site is not using Meta tag probably using server conf .
Using browser console Firefox I can see the CSP line in Response Headers

But if I use Meta tag to set CSP on my testing site I don't see this line .
So I'm wondering does this line is only visible when the CSP is set on the server conf ?
If not, what I am missing ?
Note I'm testing locally.