“I think crawl your site, try to hit the deepest, darkest corners of your website, modify your policy as you go along.”

Transcript evidence from Neil Matatall — Content Security Policy.