chromium/third_party/blink/web_tests/http/tests/inspector-protocol/resources/content-security-policy-issue-trusted-types-sink.php

<?php
header("Content-Security-Policy: require-trusted-types-for 'script';");
?>
<!DOCTYPE html>
<html>
  <body>
    <div id="exampleDiv"></div>
    <script>
      document.getElementById("exampleDiv").innerHTML = "foo";
    </script>
  </body>
</html>