chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/resources/inject-image.js

// This script block will trigger a violation report.
var i = document.createElement('img');
i.src = '/security/resources/abe.png';
document.body.appendChild(i);