chromium/chrome/test/data/extensions/test_file_with_csp.html

<!doctype html>
<html>
<head>
  <meta http-equiv="Content-Security-Policy" content="default-src 'none'">
  <title>Define a restrictive CSP.</title>
</head>
<body>
  <img src="./icon1.png">
</body>
</html>