source-list-parsing-malformed-meta.html

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="connect-src http://localhost:8000"<script>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}
</script>
</head>
<body>
<pre id="console"></pre>
<script>
function log(msg)
{
    document.getElementById("console").appendChild(document.createTextNode(msg + "\n"));
}

var xhr = new XMLHttpRequest;
xhr.open("GET", "http://127.0.0.1:8000/xmlhttprequest/resources/get.txt", true); 
xhr.onerror = _ => { log("Pass"); testRunner.notifyDone(); }
xhr.onload = _ => { log("Fail"); testRunner.notifyDone(); }
xhr.send();

</script>
<p>This test passes if the malformed meta tag doesn't cause a crash and the resource is blocked.</p>
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/source-list-parsing-malformed-meta.html