chromium/chrome/test/data/csp-sandbox.html

<!DOCTYPE html>
<html>
<head>
<title>This page has CSP: sandbox</title>
</head>
<body>
This page's CSP specifies a sandbox and should fail origin checks.
</body>
</html>