chromium/third_party/blink/web_tests/http/tests/security/isolatedWorld/isolated-world-fetch-csp.html

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="connect-src 'none'">
<script src="resources/isolated-world-fetch-csp.js"></script>
</head>
<body id="body">
    <p>
        This tests the interaction of the fetch API run in the isolated world
        with the isolated world CSP.
    </p>
</body>
</html>