chromium/third_party/blink/web_tests/http/tests/inspector-protocol/page/resources/csp.html

<meta http-equiv="Content-Security-Policy" content="default-src 'self'">
<script type="text/javascript">window.__injected = 42;</script>