We can test the CSP headers locally by running our project inside a SPA.

1. In the **orchestrator** checkout to the test/csp branch.
2. Serve your SPA and configure the orchestrator as you normally do, according to the docs: ‣.
3. In the window where the orchestrator is running (usually http://localhost:9000) set a cookie with the name oasis-name and value localTestNonce