@Test
    @Configuration("{\n" +
            "\"hsts\":\n" +
            "{ \"enabled\" : false, \"includeSubdomains\" : true, \"maxAge\" : 13, \"preload\" : true }\n" +
            ",\n" +
            "\"contentSecurityPolicy\":\n" +
            "{ \"mode\" : \"ENABLED\", \"csp\" : \"script-src 'self' https://apiman.io\" }\n" +
            ",\n" +
            "\"frameOptions\" : \"DENY\",\n" +
            "\"xssProtection\" : \"ON\",\n" +
            "\"contentTypeOptions\" : true\n" +
            "}")
    public void test() throws Throwable {
        PolicyTestResponse response = send(PolicyTestRequest.build(PolicyTestRequestType.GET, "/some/resource"));
        Set<Entry<String, String>> expected = expected(
                ent("Content-Security-Policy", "script-src 'self' https://apiman.io"),
                ent("X-Content-Type-Options", "nosniff"),
                ent("X-XSS-Protection", "1"),
                ent("X-Frame-Options", "DENY")
                );

        Set<Entry<String, String>> actual = toSet(response.headers().getEntries());
        Assert.assertTrue(actual.containsAll(expected));
    }
@author Marc Savy {@literal <msavy@redhat.com>}
plugins/http-security-policy/src/test/java/io/apiman/plugins/httpsecuritypolicy/HttpSecurityPolicyTest.java