svg.test.conf

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName svg.test
    ServerAlias base.svg.test base_a.svg.test base_b.svg.test
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName nocsp.svg.test
    ServerAlias nocsp_a.svg.test
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName xfo1.svg.test
    ServerAlias xfo1_a.svg.test xfo1_b.svg.test
    Header set X-Frame-Options "DENY"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName xfo2.svg.test
    ServerAlias xfo2_a.svg.test xfo2_b.svg.test
    Header set X-Frame-Options "SAMEORIGIN"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp0.svg.test
    ServerAlias csp0_a.svg.test csp0_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; style-src 'self';"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp1.svg.test
    ServerAlias csp1_a.svg.test csp1_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self';"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp2.svg.test
    ServerAlias csp2_a.svg.test csp2_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; object-src 'self';"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp3.svg.test
    ServerAlias csp3_a.svg.test csp3_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; frame-src 'self';"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp4.svg.test
    ServerAlias csp4_a.svg.test csp4_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; object-src 'self'; frame-src 'self';"
</VirtualHost>

<VirtualHost *:80>
    DocumentRoot /var/www/svg.test
    ServerName csp5.svg.test
    ServerAlias csp5_a.svg.test csp5_b.svg.test
    Header set Content-Security-Policy "default-src 'none'; script-src 'self' http://*.svg.test; style-src 'self' http://*.svg.test; img-src 'self' data: http://*.svg.test; object-src 'self' data: http://*.svg.test; frame-src 'self' data: http://*.svg.test;"
</VirtualHost>