chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/source-list-parsing-03.html

<!DOCTYPE html>
<html>
<head>
<script src='resources/multiple-iframe-test.js'></script>
<script>
var tests = [
    ['yes', 'script-src http:', 'resources/script.js'],
    ['no',  'script-src https:', 'resources/script.js'],
    ['no',  'script-src    https:  ', 'resources/script.js'],
];
</script>
</head>
<body onload="test()">
  <p>
    None of these scripts should execute.
  </p>