    CSPSourceTest()
        : csp(ContentSecurityPolicy::create())
    {
    }

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.