chromium/third_party/blink/web_tests/external/wpt/content-security-policy/embedded-enforcement/support/executor.html

<script>
  window.onmessage = event => eval(event.data);
</script>