Usage:
    http://cm2.pw/csp-playground?domain=auth.example.com&url=https://auth.example.com/oauth

    Parameters:
    url     -   URL issuing a redirect
    domain  -   CSP whitelisted domain
    extract -   Secret to be extracted (default: code)