CSP path matching query strings demo

Quote from the specs

Note: Query strings have no impact on matching: the source expression example.com/file matches all of https://example.com/file, https://example.com/file?key=value, https://example.com/file?key=notvalue, and https://example.com/file?notkey=notvalue.

.htaccess

Header set "Content-Security-Policy" "frame-src http://demos.scheurle.info/firefox/csp-path-matching/framed.html"

Without query string

<iframe src="http://demos.scheurle.info/firefox/csp-path-matching/framed.html">

With a query string

<iframe src="http://demos.scheurle.info/firefox/csp-path-matching/framed.html?foo=bar">