title: HTML5 meta tags: if you remove a security meta tag, does the browser update accordingly?
body: <p>If I have a CSP meta tag (as opposed to using an HTTP header), like so:</p>
  
  <p><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src https://cdn.example.net; child-src 'none'; object-src 'none'"&gt;</code></p>
  
  <p>... and then I go into developer tools and remove that node, would the browser act as though it was never provided, or would the fact that it was added at all be persistent no matter what?</p>
  
  <p>I'm asking because I want to know if I should use an HTTP header (which can't be modified), or if it's safe to just use this meta tag.</p>