content-security-policy-issue-trusted-types-policy.php

<?php
if(isset($_GET['rpt'])) {
  header("Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; trusted-types policy1");
} else {
  header("Content-Security-Policy: require-trusted-types-for 'script'; trusted-types policy1");
}
?>
<!DOCTYPE html>
<html>
  <body>
    <script>
      const policy2 = trustedTypes.createPolicy("policy2", {
        createHTML: string => string,
      });
    </script>
  </body>
</html>

chromium/third_party/blink/web_tests/http/tests/inspector-protocol/resources/content-security-policy-issue-trusted-types-policy.php